orbd.exe, et al

[Fox, Patricia]

Hi,  

 

I was just curious to find out why Java's orbd.exe, tnameserver.exe, and
servertool.exe are suddenly called Trojan.agents.  

 

 

Patricia Fox

Sr. Systems Analyst

Bell Helicopter

817.280.1091

 

 

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Matus UHLAR - fantomas]

On 04.11.09 17:39, Fox, Patricia wrote:
> I was just curious to find out why Java's orbd.exe, tnameserver.exe, and
> servertool.exe are suddenly called Trojan.agents.  

first check with (more) other AV software. If you are sure they are clean,
they are false positives and please submit them.

--
Matus UHLAR - fantomas, uhlar@... ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
We are but packets in the Internet of life (userfriendly.org)
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Steve Basford]

> I was just curious to find out why Java's orbd.exe, tnameserver.exe, and
> servertool.exe are suddenly called Trojan.agents.

Check using these sites:

http://www.virustotal.com/
http://virusscan.jotti.org/en

If it still looks like an FP submit to ClamAV here:

http://cgi.clamav.net/sendvirus.cgi

Cheers,

Steve
Sanesecurity

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Fox, Patricia]

Submitted as false positives.  

R/s,
Patricia Fox
817.280.1091

-----Original Message-----
From: clamav-users-bounces@...
[mailto:clamav-users-bounces@...] On Behalf Of Matus UHLAR
- fantomas
Sent: Thursday, November 05, 2009 1:50 AM
To: clamav-users@...
Subject: Re: [Clamav-users] orbd.exe, et al

On 04.11.09 17:39, Fox, Patricia wrote:
> I was just curious to find out why Java's orbd.exe, tnameserver.exe,
and
> servertool.exe are suddenly called Trojan.agents.  

first check with (more) other AV software. If you are sure they are
clean,
they are false positives and please submit them.

--
Matus UHLAR - fantomas, uhlar@... ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
We are but packets in the Internet of life (userfriendly.org)
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml