JoeGons
Topic Starter
Thought I would share this with you.
I installed Microsoft Security Essentials a month ago.
Just like Symantec, it does not like some "Joke" files.
However, it does not like a lot of other stuff.
It was able to remove a few items it called Trojans, Trojan Downloader, Backdoor, Remote Control Software etc before I was able to tame it in settings.
For example:
Microsoft Security Essentials
Category: Trojan Downloader
Description: This program is dangerous and downloads other programs.
Recommendation: Permit this detected item only if you trust the program or the software publisher.
Microsoft Security Essentials detected programs that may compromise your privacy or damage your computer. You can still access the files that these programs use without removing them (not recommended). To access these files, select the 'Allow' action and click 'Apply actions'. If this option is not available, log on as administrator or ask the local administrator for help.
Items:
file:C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Update\GoogleUpdateBeta.exe
file:C:\Documents and Settings\Owner\Local Settings\Temp\4.exe
service:GoogleUpdateBeta
Get more information about this item online.
TrojanDownloader:Win32/Troxen!rts (?)
Encyclopedia entry
Updated: Feb 18, 2010 | Published: Feb 18, 2010
Aliases
Not available
Alert Level (?)
High
Antimalware protection details
Microsoft recommends that you download the latest definitions to get protected.
Detection last updated:
Definition: 1.83.363.0
Released: May 23, 2010 Detection initially created:
Definition: 1.59.358.0
Released: May 27, 2009
——————————————————————————–
On this page
Summary|Symptoms|Prevention|Recovery
——————————————————————————–
Summary
TrojanDownloader:Win32/Troxen!rts is a name used for trojan detections that have been added to Microsoft signatures after advanced automated analysis.
The generic nature of this detection means that the malicious behaviors exhibited by files detected as TrojanDownloader:Win32/Troxen!rts are highly variable and may vary from once instance of this detection to the next.
No further information is currently available on this threat. However, if a significant number of reports are received, then a specific detection will be added and a detailed analysis will be created in the encyclopedia.
Top
——————————————————————————–
Symptoms
There are no common symptoms associated with this threat. Alert notifications from installed antivirus software may be the only symptom(s).
AND ON AND ON RA-DA-DA-DA-DA.
If (as I am sure it is) this is a false positive, I am now considering going back to Symantec because you can have it ask before it does most things.
If an Antimalware program can (by default) mess up a legitimate program with no undo, I’m not sure it’s worth having.
It also attacked my UBCD4Win and I’m sure that this is false.
Fortunately I found the settings and changed the default actions “Remove” to “Quarantine”.
I can restore from there.
I do not know how to let Microsoft know.
Joe
