Jump to content
gen-hackman

False positive from List_Kill'em

Recommended Posts

hello to all persons

there's a false positive detected in List_Kill'em program ans others , saying that "catchme" component is Trojan.Agent :

C:\Program Files\List_Kill'em\catchme.exe (Trojan.Agent) -> Quarantined and deleted successfully.

if you want to study that ,I give you a link of my tool to download this (but catchme tool comes directly from gMer site).

List_Kill'em

Share this post


Link to post
Share on other sites

ok thanks cause in france since mbam says that , some of people take that for a Virus...lol ^^

Share this post


Link to post
Share on other sites

Malware uses catchme (banker trojans usually) and that is the cause of the FPs .

We actually know GMER quite well , it is a double edge sword that his tool is so effective .

Share this post


Link to post
Share on other sites

ok I don't understand how 'catchme' could be effective in a malware

would you like to tell me ?

could it be used in a command line to destroy or make some damage in the system ?

Share this post


Link to post
Share on other sites

It is used to destroy other security software through direct disk access.

Share this post


Link to post
Share on other sites

ok i didn't think to use that in this way ^^

but if it's ok i 'll not make me longer here

sorry for my english but it comes from the school ^^

Share this post


Link to post
Share on other sites

Hello to all

I come back to you for that False positive :

C:\Program Files\List_Kill'em\shcut.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

it's to make a shortcut on the desktop to call List_Kill'em.exe in the program

Thanks to look at this

Gen-hackman

Share this post


Link to post
Share on other sites
Hello to all

I come back to you for that False positive :

C:\Program Files\List_Kill'em\shcut.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

it's to make a shortcut on the desktop to call List_Kill'em.exe in the program

Thanks to look at this

Gen-hackman

Hello, please follow the instructions below for posting false\positive results:

http://www.malwarebytes.org/forums/index.php?showtopic=3228

Share this post


Link to post
Share on other sites

excuse me but I saw it on a topic on Commentcamarche.net where I'm helping

Share this post


Link to post
Share on other sites
excuse me but I saw it on a topic on Commentcamarche.net where I'm helping

Then have the user post her with the information requested. Without it we cannot make any changes.

Share this post


Link to post
Share on other sites
if I understood what you wanted to say , here's the file with the detection's report in a .zip file

http://sd-4.archive-host.com/membres/up/82...ols/Desktop.zip

Thanks, but you did not run the developers log as instructed in the previously provided link, please do so.

Share this post


Link to post
Share on other sites

hello

ok thanks

i wrote in the program to delete the file at the end of installation , launching "Search" option , like this , there'll be no more problems with this file

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.