Mailing List Archive: ClamAV: users

orbd.exe, et al

Index | Next | Previous | View Threaded

PFox at bellhelicopter

Nov 4, 2009, 3:39 PM

Post #1 of 4 (192 views)
Permalink

orbd.exe, et al

Hi,

I was just curious to find out why Java's orbd.exe, tnameserver.exe, and
servertool.exe are suddenly called Trojan.agents.

Patricia Fox

Sr. Systems Analyst

Bell Helicopter

817.280.1091

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

uhlar at fantomas

Nov 4, 2009, 11:49 PM

Post #2 of 4 (179 views)
Permalink

Re: orbd.exe, et al [In reply to]

On 04.11.09 17:39, Fox, Patricia wrote:
> I was just curious to find out why Java's orbd.exe, tnameserver.exe, and
> servertool.exe are suddenly called Trojan.agents.

first check with (more) other AV software. If you are sure they are clean,
they are false positives and please submit them.

--
Matus UHLAR - fantomas, uhlar[at]fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
We are but packets in the Internet of life (userfriendly.org)
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

steveb_clamav at sanesecurity

Nov 5, 2009, 1:10 AM

Post #3 of 4 (176 views)
Permalink

Re: orbd.exe, et al [In reply to]

> I was just curious to find out why Java's orbd.exe, tnameserver.exe, and
> servertool.exe are suddenly called Trojan.agents.

Check using these sites:

http://www.virustotal.com/
http://virusscan.jotti.org/en

If it still looks like an FP submit to ClamAV here:

http://cgi.clamav.net/sendvirus.cgi

Cheers,

Steve
Sanesecurity

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

PFox at bellhelicopter

Nov 5, 2009, 11:56 AM

Post #4 of 4 (174 views)
Permalink

Re: orbd.exe, et al [In reply to]

Submitted as false positives.

R/s,
Patricia Fox
817.280.1091

-----Original Message-----
From: clamav-users-bounces[at]lists.clamav.net
[mailto:clamav-users-bounces[at]lists.clamav.net] On Behalf Of Matus UHLAR
- fantomas
Sent: Thursday, November 05, 2009 1:50 AM
To: clamav-users[at]lists.clamav.net
Subject: Re: [Clamav-users] orbd.exe, et al

On 04.11.09 17:39, Fox, Patricia wrote:
> I was just curious to find out why Java's orbd.exe, tnameserver.exe,
and
> servertool.exe are suddenly called Trojan.agents.

first check with (more) other AV software. If you are sure they are
clean,
they are false positives and please submit them.

--
Matus UHLAR - fantomas, uhlar[at]fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
We are but packets in the Internet of life (userfriendly.org)
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com