Zone Alarm Pro - False Positive Report of Ardamax.e?

Zone Alarm Pro - False Positive Report of Ardamax.e?
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Zone Alarm Pro - False Positive Report of Ardamax.e? Dick K 11-12-2007
Posted by Dick K on November 12, 2007, 9:31 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Zone Alarm Pro seems to have decided to take exception
to something on my XP MCE 2005 system. The latest
scan reported an instance of medium risk spyware which
it named as Win32.Trojan.Spy.Ardamax.e. The report
showed a path of HKLM\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\Adobe Flash Player Plugin

Scans of my system with NOD32, AdAware 2007, Spybot
Search & Destroy and Spyware Doctor found nothing but
a few tracking cookies.

I've more or less convinced myself that I'm dealing
with a false positive. Several people have reported
similar experiences on the Zone Labs forum and reached
a similar conclusion, though no authoritative
explanation has been forthcoming.

So, I'd like to ask whether the scans I've run are
sufficient to afford reasonable confidence that my
system isn't infected and, if not, what else should
I try? Thanks for any help.

Posted by =?Utf-8?B?c2Ft?= on November 22, 2007, 7:44 am
If you were  Registered and logged in, you could reply and use other advanced thread options
if you have scanned your system with updated virus definition its fine
nothing to worry

"Dick K" wrote:

> Zone Alarm Pro seems to have decided to take exception
> to something on my XP MCE 2005 system. The latest
> scan reported an instance of medium risk spyware which
> it named as Win32.Trojan.Spy.Ardamax.e. The report
> showed a path of HKLM\SOFTWARE\Microsoft\Windows\
> CurrentVersion\Uninstall\Adobe Flash Player Plugin
>
> Scans of my system with NOD32, AdAware 2007, Spybot
> Search & Destroy and Spyware Doctor found nothing but
> a few tracking cookies.
>
> I've more or less convinced myself that I'm dealing
> with a false positive. Several people have reported
> similar experiences on the Zone Labs forum and reached
> a similar conclusion, though no authoritative
> explanation has been forthcoming.
>
> So, I'd like to ask whether the scans I've run are
> sufficient to afford reasonable confidence that my
> system isn't infected and, if not, what else should
> I try? Thanks for any help.
>

Posted by Straight Talk on November 22, 2007, 12:35 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On Thu, 22 Nov 2007 04:44:01 -0800, sam

>if you have scanned your system with updated virus definition its fine
>nothing to worry

Wait a minute, here is what happened:

1) The OP based his security on toys like ZA.
2) The OP used a "cure" called "scanning" which by definition is
useless against malware.

and then you claim "nothing to worry"? - you must be joking.

Posted by Dick K on November 24, 2007, 2:47 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Thank you for your reassurance. My virus definitions were indeed
up-to-date and, as I should perhaps have mentioned, the fact that my PC
sits behind a NAT router added another level of comfort. The scan report
no longer shows up so Zone Labs seem to have corrected the problem.

Regards,

Dick K

sam wrote:
> if you have scanned your system with updated virus definition its fine
> nothing to worry
>
> "Dick K" wrote:
>
>> Zone Alarm Pro seems to have decided to take exception
>> to something on my XP MCE 2005 system. The latest
>> scan reported an instance of medium risk spyware which
>> it named as Win32.Trojan.Spy.Ardamax.e. The report
>> showed a path of HKLM\SOFTWARE\Microsoft\Windows\
>> CurrentVersion\Uninstall\Adobe Flash Player Plugin
>>
>> Scans of my system with NOD32, AdAware 2007, Spybot
>> Search & Destroy and Spyware Doctor found nothing but
>> a few tracking cookies.
>>
>> I've more or less convinced myself that I'm dealing
>> with a false positive. Several people have reported
>> similar experiences on the Zone Labs forum and reached
>> a similar conclusion, though no authoritative
>> explanation has been forthcoming.
>>
>> So, I'd like to ask whether the scans I've run are
>> sufficient to afford reasonable confidence that my
>> system isn't infected and, if not, what else should
>> I try? Thanks for any help.
>>

Similar ThreadsPosted
Uninstalling Zone Alarm August 26, 2006, 8:26 pm
win32.yerivar.net Alert from Zone Alarm May 13, 2008, 8:06 pm
Win32.TrojanSpy.Goldun False Positive? January 27, 2008, 5:16 pm
Is this a false positive or bug with IE 6, McAfee 8/9/10 or both IE 6 and McAfee? June 26, 2006, 6:57 am
Windows XP SP2 raising afalse security alarm January 4, 2008, 8:08 am
Is Zone Labs site down? December 22, 2006, 3:45 pm
Bogus NS Records in AD Integrated DNS zone. A worm? September 7, 2006, 2:12 pm
What do others think of this report? December 5, 2007, 6:21 pm
Send Error Report? November 3, 2005, 10:17 pm
Symantc Vundo Removal Not 100%; Battle Report November 27, 2005, 12:28 pm

The site map in XML format XML site map

Contact Us | Privacy Policy