A-squared False Positive?

fay47
Royal Geek
User is Offline



Joined: 23 Nov 2006
Posts: 590


Posted: Tue Jul 08, 2008 10:42 pm Post subject: question about a-squared · Quote · Edit · Delete · IP


--------------------------------------------------------------------------------

A-squared is returning something that I suspect is a false positive.
It is telling me it found:
Backdoor.WIn32.Sandrator.C
The location it is giving me is a .dll installed when I installed visual fox pro using a valid micorsoft vfp installation disk.
Adaware doesnt find it, spybot doesn't find it, AVAST doesn't find it.

How do i verify whether or not this is a real problem or a false positive?

Fay

Back to top · Profile · PM · Email



--------------------------------------------------------------------------------

Repa
Site Admin
User is Online



Joined: 26 Nov 2006
Posts: 1847
Location: North Carolina

Posted: Wed Jul 09, 2008 1:53 am Post subject: · Quote · Edit · Delete · IP


--------------------------------------------------------------------------------

Fay, I can't find anything recent on this. Did find a post on this, but it was back in 2005. I would go to the emsisoft forum and post your problem there in the a-squared free forum. I don't see any posts there related to this, so it could be a problem with the most recent update - did you just do one? Had you scanned before your last update without any problems? The emsisoft forurm is located here:

http://forum.emsisoft.com/

You can also contact emsisoft directly by email and ask your question there:

http://www.emsisoft.com/en/support/contact/

If you contact them directly, provide them with a copy of your a-squared logfile and all information regarding the file it is detecting.
_________________
Repa


Older than dirt!

Back to top · Profile · PM · Email



--------------------------------------------------------------------------------

fay47
Royal Geek
User is Offline



Joined: 23 Nov 2006
Posts: 590


Posted: Wed Jul 09, 2008 11:59 am Post subject: · Quote · Edit · Delete · IP


--------------------------------------------------------------------------------

Repa,

I sent an e-mail to a-squared. Got and e-mail backing asking me to attch the detected file. I did that and am waiting ot hear back form them.

Guess this is a dumb question, but whree do I find the log file for a_squared in case I do need that?

Thanks,
Fay

Back to top · Profile · PM · Email



--------------------------------------------------------------------------------

fay47
Royal Geek
User is Offline



Joined: 23 Nov 2006
Posts: 590


Posted: Wed Jul 09, 2008 12:30 pm Post subject: · Quote · Edit · Delete · IP


--------------------------------------------------------------------------------

I just got a response from a-squared. They confirmed it was a false alert and said it would be patched in the next signature update.

I was very impressed with their fast response. I just sent them the e-mail this morning and already have an answer

Fay

Back to top · Profile · PM · Email



--------------------------------------------------------------------------------

Repa
Site Admin
User is Online



Joined: 26 Nov 2006
Posts: 1847
Location: North Carolina

Posted: Wed Jul 09, 2008 7:35 pm Post subject: · Quote · Edit · Delete · IP


--------------------------------------------------------------------------------

fay47 wrote:
Repa,

I Guess this is a dumb question, but whree do I find the log file for a_squared in case I do need that?

Thanks,
Fay


Not a dumb question - my error, sorry! There is a link on the Security Status page leading to instructions for submitting suspect files. Glad you got a quick answer. I have emailed them in the past about a suspected false positive and got the same, quick response.
_________________