BleepingComputer.com: Possible False Negative?

Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Possible False Negative?

#1 User is offline   athelos 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 138
  • Joined: 10-December 06
  • Gender:Male

Posted 31 July 2007 - 02:58 PM

Hi its been a while since i was on this part of the forum.

I was doing a pandascan a while ago. I wasnt expecting much on it. Preparing myself for just a few spyware maybe as it had been a while since i last scanned my computer. After a while however it picked up these 2 files as suspicious:

C:\documents and settings\ben\my documents\ati updates\dcprosetup_15.zip[dcprosetup.exe][DCleaner.exe]
C:\documents and settings\ben\my documents\DCProsetup_15\DCProSetup.exe[DCleaner.exe]

Now i thought that these were legit files? Could it be a mistake on pandas behalf or should i look into it more? What are your opinons on the matter?

P.S. Thats twice now my internets konked out while on BC.... Sound supcious? Should i go into safe mode and try a few tests?

This post has been edited by athelos: 31 July 2007 - 03:00 PM

Don't worry about the world coming to an end today. It's already tomorrow in Australia.
--Charles Schultz

#2 User is offline   buddy215 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 4,491
  • Joined: 14-April 06
  • Gender:Male
  • Location:West Tennessee

Posted 31 July 2007 - 03:12 PM

Use the program in the link below to remove the malware.
http://www.malwarebytes.org/rogueremover.php

Description of malware:
http://spywarefiles.prevx.com/RRIHGJ294489/DCLEANER.EXE.html

#3 User is offline   athelos 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 138
  • Joined: 10-December 06
  • Gender:Male

Posted 31 July 2007 - 03:23 PM

weird because i have prevex already installed and its giving me the green status... Ill still run the programme you gave me though. thanks ^.^
Don't worry about the world coming to an end today. It's already tomorrow in Australia.
--Charles Schultz

#4 User is offline   athelos 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 138
  • Joined: 10-December 06
  • Gender:Male

Posted 31 July 2007 - 03:50 PM

Ok sorry for bothering people. Just had words with my dad and apparently it was installed when i was having problems with my graphics card. Apparently its harmless (fingers crossed) and hes told me that if its really bugging me (which it is) to just remove it useing add/remove. Thanks for the help buddy :thumbsup:

A quick question though. That link, the rouge remover. Is that a programme just for removing stuff that pretends to be legitimate programmes or is it any type of maleware. thanks again :flowers:
Don't worry about the world coming to an end today. It's already tomorrow in Australia.
--Charles Schultz

#5 User is offline   buddy215 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 4,491
  • Joined: 14-April 06
  • Gender:Male
  • Location:West Tennessee

Posted 31 July 2007 - 04:01 PM

I think the program lists 300+ rogue programs that it will remove. A lot of rogue programs are installed voluntarily and they may have an uninstaller that actually works. Rogues generally make false claims, come with adware/spyware without letting the user know and a lot of times cause a lot of damage.
I would remove it since everything I saw Googling said it was an undesireable program.

#6 User is offline   Starbuck 

  • 'r Brudiwr
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 3,180
  • Joined: 10-April 05
  • Gender:Male
  • Location:South Wales, UK

Posted 31 July 2007 - 06:19 PM

If you click this link...............
http://www.malwarebytes.org/rogueremover_d...ase_history.php
then scroll through it, it will tell you what RogueRemover will remove from your pc.
Posted Image Posted Image

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users