The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Trojan or false alarm?

    Discussion in 'Security and Anti-Virus Software' started by passive101, Apr 10, 2009.

  1. passive101

    passive101 Notebook Deity

    Reputations:
    36
    Messages:
    1,548
    Likes Received:
    0
    Trophy Points:
    55
    Avira scanned and found nothing. Super anti spyware claims Trojan.Agent.ATV in a file. Maleware Bytes is also not finding anything in the file. Super Anti spyware says it needs to restart to remove it, but the file is always there and infected. This is for a program file from a program I downloaded.

    Is this a false positive? I deleted the file, but running the program creates the file again in the same folder.

    This is what super anti spyware says about it
    Detected Item Description and Information

    Listed below is basic information about the detected application/process. This application may not be safe to have on your system.

    Summary : Trojan.SVCHost/Fake.Process

    Company : Unknown

    Description : Trojan.SVCHost/Fake.Process

    Threat Level (1-10) : 5

    Processes : SVCHOST.EXE

    CLSID List :


    This is Virus Totals

    File svchost.exe received on 04.10.2009 21:25:43 (CET)
    Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
    Result: 2/40 (5%)
    Loading server information...
    Your file is queued in position: 2.
    Estimated start time is between 44 and 63 seconds.
    Do not close the window until scan is complete.
    The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
    If you are waiting for more than five minutes you have to resend your file.
    Your file is being scanned by VirusTotal in this moment,
    results will be shown as they're generated.
    Compact Compact
    Print results Print results
    Your file has expired or does not exists.
    Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

    You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
    Email:

    Antivirus Version Last Update Result
    a-squared 4.0.0.101 2009.04.10 -
    AhnLab-V3 5.0.0.2 2009.04.10 Constructor/Joiner.36352
    AntiVir 7.9.0.138 2009.04.10 -
    Antiy-AVL 2.0.3.1 2009.04.10 -
    Authentium 5.1.2.4 2009.04.10 -
    Avast 4.8.1335.0 2009.04.09 -
    AVG 8.5.0.285 2009.04.10 -
    BitDefender 7.2 2009.04.10 -
    CAT-QuickHeal 10.00 2009.04.10 Trojan.Agent.ATV
    ClamAV 0.94.1 2009.04.10 -
    Comodo 1109 2009.04.10 -
    DrWeb 4.44.0.09170 2009.04.10 -
    eSafe 7.0.17.0 2009.04.07 -
    eTrust-Vet 31.6.6448 2009.04.10 -
    F-Prot 4.4.4.56 2009.04.10 -
    F-Secure 8.0.14470.0 2009.04.10 -
    Fortinet 3.117.0.0 2009.04.10 -
    GData 19 2009.04.10 -
    Ikarus T3.1.1.49.0 2009.04.10 -
    K7AntiVirus 7.10.698 2009.04.09 -
    Kaspersky 7.0.0.125 2009.04.10 -
    McAfee 5580 2009.04.10 -
    McAfee+Artemis 5580 2009.04.10 -
    McAfee-GW-Edition 6.7.6 2009.04.10 -
    Microsoft 1.4502 2009.04.10 -
    NOD32 3999 2009.04.10 -
    Norman 6.00.06 2009.04.09 -
    nProtect 2009.1.8.0 2009.04.10 -
    Panda 10.0.0.14 2009.04.10 -
    PCTools 4.4.2.0 2009.04.08 -
    Prevx1 V2 2009.04.10 -
    Rising 21.24.44.00 2009.04.10 -
    Sophos 4.40.0 2009.04.10 -
    Sunbelt 3.2.1858.2 2009.04.10 -
    Symantec 1.4.4.12 2009.04.10 -
    TheHacker 6.3.4.0.305 2009.04.10 -
    TrendMicro 8.700.0.1004 2009.04.10 -
    VBA32 3.12.10.2 2009.04.10 -
    ViRobot 2009.4.10.1688 2009.04.10 -
    VirusBuster 4.6.5.0 2009.04.10 -
     
  2. Brawn

    Brawn The Awesome

    Reputations:
    145
    Messages:
    1,215
    Likes Received:
    4
    Trophy Points:
    56
    chances are it's a false alarm because if avira can't catch it.. i really doubt a spyware scanner would catch it, you have to say what program it is that you downloaded or else we can't tell from what you've given us

    i'm guessing you got this program from a torrent, just check the comments left behind by people who've downloaded it, i'm sure someone will point out that there's a virus detected and perhaps someone will point out that it isn't a virus