Zone Alarm Pro - False Positive Report of Ardamax.e?

[Dick K]

Zone Alarm Pro seems to have decided to take exception
to something on my XP MCE 2005 system. The latest
scan reported an instance of medium risk spyware which
it named as Win32.Trojan.Spy.Ardamax.e. The report
showed a path of HKLM\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\Adobe Flash Player Plugin

Scans of my system with NOD32, AdAware 2007, Spybot
Search & Destroy and Spyware Doctor found nothing but
a few tracking cookies.

I've more or less convinced myself that I'm dealing
with a false positive. Several people have reported
similar experiences on the Zone Labs forum and reached
a similar conclusion, though no authoritative
explanation has been forthcoming.

So, I'd like to ask whether the scans I've run are
sufficient to afford reasonable confidence that my
system isn't infected and, if not, what else should
I try? Thanks for any help.

 

[sam]

if you have scanned your system with updated virus definition its fine
nothing to worry

"Dick K" wrote:

> Zone Alarm Pro seems to have decided to take exception
> to something on my XP MCE 2005 system. The latest
> scan reported an instance of medium risk spyware which
> it named as Win32.Trojan.Spy.Ardamax.e. The report
> showed a path of HKLM\SOFTWARE\Microsoft\Windows\
> CurrentVersion\Uninstall\Adobe Flash Player Plugin
>
> Scans of my system with NOD32, AdAware 2007, Spybot
> Search & Destroy and Spyware Doctor found nothing but
> a few tracking cookies.
>
> I've more or less convinced myself that I'm dealing
> with a false positive. Several people have reported
> similar experiences on the Zone Labs forum and reached
> a similar conclusion, though no authoritative
> explanation has been forthcoming.
>
> So, I'd like to ask whether the scans I've run are
> sufficient to afford reasonable confidence that my
> system isn't infected and, if not, what else should
> I try? Thanks for any help.
>

 

[Straight Talk]

On Thu, 22 Nov 2007 04:44:01 -0800, sam
<sam@discussions.microsoft.com> wrote:

>if you have scanned your system with updated virus definition its fine
>nothing to worry

Wait a minute, here is what happened:

1) The OP based his security on toys like ZA.
2) The OP used a "cure" called "scanning" which by definition is
useless against malware.

and then you claim "nothing to worry"? - you must be joking.

 

[Dick K]

Thank you for your reassurance. My virus definitions were indeed
up-to-date and, as I should perhaps have mentioned, the fact that my PC
sits behind a NAT router added another level of comfort. The scan report
no longer shows up so Zone Labs seem to have corrected the problem.

Regards,

Dick K

sam wrote:
> if you have scanned your system with updated virus definition its fine
> nothing to worry
>
> "Dick K" wrote:
>
>> Zone Alarm Pro seems to have decided to take exception
>> to something on my XP MCE 2005 system. The latest
>> scan reported an instance of medium risk spyware which
>> it named as Win32.Trojan.Spy.Ardamax.e. The report
>> showed a path of HKLM\SOFTWARE\Microsoft\Windows\
>> CurrentVersion\Uninstall\Adobe Flash Player Plugin
>>
>> Scans of my system with NOD32, AdAware 2007, Spybot
>> Search & Destroy and Spyware Doctor found nothing but
>> a few tracking cookies.
>>
>> I've more or less convinced myself that I'm dealing
>> with a false positive. Several people have reported
>> similar experiences on the Zone Labs forum and reached
>> a similar conclusion, though no authoritative
>> explanation has been forthcoming.
>>
>> So, I'd like to ask whether the scans I've run are
>> sufficient to afford reasonable confidence that my
>> system isn't infected and, if not, what else should
>> I try? Thanks for any help.
>>