Pages: 1
RSS
trojans and the bat, spyware doctor reporting trojan infection
 
Hi

I have just installed and run spyware doctor v3.8 and it reports that my system is infected with something called backdoor.hackdoor but all the references relate to registry entries for The Bat!

I have had Trojan Hunter (4.5) and Trojan Guard Scanner running previously and there has never been a report for any trojan infection when I have run system scans.

Can anyone tell me if this is likely to be a false positive? I don't want to select 'Fix' if there is not actually a problem!

The version of the bat is 2.00.6

I've just upgraded to bat 3.8 but don't want to install over the top if there is an underlying problem.

Thanks.
 
Update:

I've been on to ritlabs support and pctools. RitLabs got back to me really quickly and I'm waiting on another reply from pctools to this email:

My main concern is that Spyware Doctor appears to be reporting that my email program The Bat! (www.ritlabs.com) has 663 instances of Trojan infection.

I've raised a ticket with PCTools as well as with Ritlabs - here is the response I had from RitLabs:

> The Bat! has never been a backdoor/hackdoor spy-program!
> http://www.softpedia.com/get/Internet/E-mail/E-mail-Clients/The-Bat-Professional.shtml
>
> Unless someone is using a cracked version of The Bat!
>
> We are now contacting Spyware developers. Hope we will solve that issue very soon.

Well, I'm not using a cracked version of the bat so that is not an issue... it'll be interesting to see what happens.

I have Trojan Hunter Guard scanner running and full system scans with Trojan Hunter have never indicated a problem.

Previously I have used adaware, pest patrol and spysweeper and they never gave me results referring to The Bat; so, unless this is something new that has got in behind the other anti-malware progs I'm running, it seems that spyware doctor could be reporting a false
positive.

...BTW I started the thread but had changed my user name
 
A similar instance..

I use Spyware Terminator http://www.spywareterminator.com/

And it is also reporting that the Registry key

HKCU\Software\RIT\The Bat!

Is attributed to remaining items of the following Trojan

Trojan/Haxdoor.YVS

Cleaning it up with SpywareTerminator, basically removes the registered status of my version of The Bat! Professional 3.99.3

Is this a false positive, I should report to SpywareTerminator?
 
I have sent report to Spyware terminator on friday, but did not received any answer yet.  
 
Spyware terminator fixed this false-positive problem in database version 1.0.812.568
 
We even had a news item on our website: http://www.ritlabs.com/en/products/thebat/news_detail.php?ID=2138
Pages: 1