FP - lnchtour.exe - Trojan.Agent.b!ct

[Cutter]

Just updated spyware doctor and it's saying lnchtour.eve is a trojan, although i'm pretty sure that's part of microsoft works and not a trojan, am i right?

[haapy]

I am seeing this as Adware.Vundo/Variant-MSFake but is could be a false positive.

My recommendation is to quarantine it, then check out works to make sure everything is OK.

This should be checked out by PCT. I PMd achen.

Since we probably will not get a response till late Sunday, you might want to check this out:

http://www.programchecker.com/file/26599.aspx

I have not personally used this product, but it looks legit from what I can see.

[spiderknight]

I thought I'd seen Trojan.Agent.b!ct before there is another forum post from lisaz last updated 3-11-09 said she had the same possible malware. I also say keep the files in quarantine for now, better to be safe them sorry with possible malware. But also you should connact PC Tools tech supprt so they can open a case for you & look at the files in question. You can find there phone# for your area of the world (The U.S.A. is 800-764-5783 option 3) by going to the PC Tools website->Company drop down menu->Contact. Tech Support was very helpful, I just got back an e-mail that the latest samplies I sent to PC Tools were a again FP's. But one warning don't be suprised if you do in the end restore those files that program you restore them to doesn't work right, I had this happen now 2 times and had to in the end uninstall & reinstall the 2 programs. To be fair there has also been times the restore did work right.:D

[AChen]

Just updated spyware doctor and it's saying lnchtour.eve is a trojan, although i'm pretty sure that's part of microsoft works and not a trojan, am i right?

Could you please send the file that's being detected and also a history file and we'll check this out further.

[Cutter]

Where/who do i send the file to?

[AChen]

Where/who do i send the file to?

You can send it to my email :) I sent you a PM with the details.

[Cutter]

I uploaded the file to filefront because the forum only allows 1.7mb and the file is 4mb i also mailed the password for the .zip file to you, thanks again for your help.

http://files.filefront.com/lnchtourzip/;13475202;/fileinfo.html

[jamesbraken]

It can be some trojan or spyware which is showing this massege you have scan you pc with superantispyware or malawarebytes in the safe mode.

[Cutter]

I use nod32 also which didn't pick it up, i also unistalled microsft office 8.5 and installed again, i think the file is part of ms office 8.5 if i'm honest.

[AChen]

We have checked the file and this is indeed a FP :) We have resolved the issue and an update will be available shortly.

[Cutter]

Thank you again for th eupdates Achen and for getting it fixed so quick, thank the guys working on it also, keep up the great work.

[janetlorraine]

I was wondering how long it normally takes to correct a false finding. I just downloaded this program and used it forthe first time. When I ran it, there were several files that were Inchtour marked for removal. When I did a search for the file, I came across this forum and saw that the were not viruses and that the false positive was identified in mid March as something to get taken care of. There's been updates to the program but this is still showing up.

[AChen]

I was wondering how long it normally takes to correct a false finding. I just downloaded this program and used it forthe first time. When I ran it, there were several files that were Inchtour marked for removal. When I did a search for the file, I came across this forum and saw that the were not viruses and that the false positive was identified in mid March as something to get taken care of. There's been updates to the program but this is still showing up.

Hi Janetlorraine,

This is an older thread where the problem has been resolved previously, however, it looks like it has re-surfaced again. Check out: http://www.pctools.com/forum/showthread.php?t=56942. Robin attached the detected file, however, I tested a full scan with this file and the scan was clean. Is it possible for you to attach the detected files so we can check this out.

[janetlorraine]

I've attached the file - it took a bit to discover the only file type I could upload is a txt one. I hope there is sufficient formatting for you to tell what my report said.

Thanks for your help!

JanetLorraine

[AChen]

I've attached the file - it took a bit to discover the only file type I could upload is a txt one. I hope there is sufficient formatting for you to tell what my report said.

Thanks for your help!

JanetLorraine

Thanks for the info. A fix is in place and hopefully it will be available in either today or tomorrow's update :)