This threat real or False?

[EraserOne]

Hi
Using SD 6.0.1.440 data 6.12160

and SD was running a full scan by itself and came across this
trojan.Agent.B!ct

File
C:\Backup\09-03-130724PM\Program Files\Microsoft Works\lnchtour.exe
C:|Program Files\Microsoft Works\lnchtour.exe

Is it real or false?

I clicked on Fix and it deleted it so i guess it was the right thing to do?

Thanks

[AChen]

Hi EraserOne,

If you are unsure if SD has detected a FP, please follow the instructions in this thread:http://www.pctools.com/forum/showthread.php?t=55575 and we can double check this for you.

[cally120]

I had this one too, last tues 7th april, my pc is new (a wk old now) and I had installed SD because I have subscription to it, same day I set up pc and was running a check and it found this one, I couldnt understand it really cos I hadnt been on the net for very long , thankfully it deleted it.

[sciencewis1]

I think that you are right that this is an FP, unless Microsoft Works has been compromised.

[lucid]

i have inchtour.exe in that folder and it scans as clean with SDA. version 2.5.0.16

[Robin Springall]

Unfortunately it hasn't been fixed yet: the file is still being seen as a Trojan.

[AChen]

Hi Robin,

Unfortunately it hasn't been fixed yet: the file is still being seen as a Trojan.

I moved your post here as this could possibly be another FP. Is it possible to attach the file? being detected by SD as I have not been able to recreate the problem. Once we receive the file, we can check this out further.

[Robin Springall]

OK old chap, it's available for the next 7 days from this link:
https://www.yousendit.com/download/dVlvYlJXSytubVZMWEE9PQ

Many thanks
Robin

[AChen]

OK old chap, it's available for the next 7 days from this link:
https://www.yousendit.com/download/dVlvYlJXSytubVZMWEE9PQ

Many thanks
Robin

Thanks Robin. I've checked the file in question and the scan is coming up clean.

What version of SD are you currently running and also DB version?

[Robin Springall]

I found the problem on 26 April on a friend's PC running the free version of SD that ships with the Google Pack; it doesn't appear on my computer running v 6.0.1.441 but then I have an older version of Microsoft Works anyway. I ran smart update on both versions of SD - perhaps the db on the Google Pack version is different.

While we're on the subject, SD says jestertb.dll is a trojan, which made somebody at Adobe very cross (the file is part of Flash).

I've been watching SD's development over the months, and I'm relieved that it seems to be getting much more reliable again. Just slightly worried that Symantec will shut down this PC Tools like they did with the last one...

[AChen]

I found the problem on 26 April on a friend's PC running the free version of SD that ships with the Google Pack; it doesn't appear on my computer running v 6.0.1.441 but then I have an older version of Microsoft Works anyway. I ran smart update on both versions of SD - perhaps the db on the Google Pack version is different.

While we're on the subject, SD says jestertb.dll is a trojan, which made somebody at Adobe very cross (the file is part of Flash).

I've been watching SD's development over the months, and I'm relieved that it seems to be getting much more reliable again. Just slightly worried that Symantec will shut down this PC Tools like they did with the last one...

Could you attach jestertb.dll to this thread and we'll check it out.

And regarding Symantec, check out http://www.pctools.com/forum/showpost.php?p=205626&postcount=3.