Iobit software not picking up trojans

[MarkH]

Cookie Guard is turned ON. A scan with a different product (Zemana Antimalware) found 53 tracking cookies. What's up with that?

 

Please see attachment.

I have a similar problem,Zonealrm has just picked up 3 trojan files,the same scan with malware fighter pro,doesnt pick up anything.

[MarkH]

I have a similar problem,Zonealrm has just picked up 3 trojan files,the same scan with malware fighter pro,doesnt pick up anything.

Heres the iobit screen shot, and ive updated my profile with tech specs. of the computer.

[MarkH]

Update

 

Ive checked that the "DOG" is enabled,levels set to high ref detection.Re run the scan on a known infected drive,negative result.

[MarkH]

With reference to the trojan file,not removed/identified--1 of 3

Name : Trojan-Downloader:W32/Agent

Detection Names : Trojan-downloader.win32.agent

Category: Malware

Type: Trojan-Downloader

Platform: W32

[MarkH]

Tech support ticket raised for this issue as this is a paid for version.....

[enoskype]

Hi MarkH, welcome to IObit Forum! :-D

 

Your case is not the same as jbooth's.

 

I will let IObit to follow up and deal with your case, but did you check those files if any other engine flags them as malware or virus in VirusTotal?

 

Since IMF has not flagged them as malware, probably uploding them to IObit Cloud will have the same result, but well worth of trying to see if there is any difference.

 

Also uploading the files to Wikisend and giving the download links to IObit (or here) for further investigation of IObit may help to speed up the matter.

 

BTW, thanks for the update of your profile, but still which versions of IObit products and other security softwares you are using is not clear.

 

Cheers.

[MarkH]

results as requested

 

Hi,thankyou for the reply,apologies for taking a while to return the favour.

virus total result on one of the files is as follows,the results got a little mangled in the copy/paste process,but its readable,ive underlined the positive hits:

SHA256: fac9f278bcd3e1712e5b395c0eb5bd37f942ffe91e2ab5f251fd985d04925c2c

File name: media Player Classic.exe

Detection ratio: 15 / 40

Analysis date: 2012-08-02 07:22:32 UTC ( 1 minute ago )

0

0

More details

Antivirus Result Update

AhnLab-V3 - 20120802

AntiVir TR/Dropper.Gen 20120802

Antiy-AVL - 20120802

Avast - 20120802

AVG - 20120801

BitDefender Trojan.Crypt.GU 20120802

ByteHero - 20120723

CAT-QuickHeal - 20120802

ClamAV - 20120802

Commtouch W32/Dropper.N.gen!Eldorado 20120802

Comodo - 20120802

DrWeb Trojan.DownLoad.5878 20120802

Emsisoft - 20120802

eSafe - 20120731

ESET-NOD32 a variant of Win32/TrojanDropper.Small.NID 20120801

F-Prot W32/Dropper.N.gen!Eldorado 20120801

F-Secure Trojan.Crypt.GU 20120802

Fortinet - 20120802

GData Trojan.Crypt.GU 20120802

Ikarus - 20120802

Jiangmin - 20120802

K7AntiVirus Riskware 20120801

McAfee - 20120802

McAfee-GW-Edition - 20120801

Microsoft TrojanDownloader:Win32/Youaru.A 20120802

Norman - 20120801

nProtect Trojan.Crypt.GU 20120801

Panda Suspicious file 20120801

Rising - 20120802

Sophos - 20120802

SUPERAntiSpyware - 20120802

Symantec - 20120802

TheHacker - 20120801

TotalDefense - 20120801

TrendMicro Mal_DRPR-3 20120802

TrendMicro-HouseCall Mal_DRPR-3 20120802

VBA32 Malware-Cryptor.Win32.Rp 20120801

VIPRE - 20120802

ViRobot - 20120802

VirusBuster - 20120801

[MarkH]

Can admin split this post to another if the problem is not the same as the original post,i dont want to hijack the thread !!

 

Thanks..

[MarkH]

next file results

 

As requested,a further file scan,2nd detection.

 

SHA256: 81ff3d768e3efacc6c39047c408221c37ca3536e4685ff24250f58371ad4af8c

File name: Video_Cutter

Detection ratio: 29 / 40

Analysis date: 2012-08-02 07:56:42 UTC ( 1 minute ago )

0

0

More details

Antivirus Result Update

AhnLab-V3 - 20120802

AntiVir TR/Agent.113152.6 20120802

Antiy-AVL Trojan/win32.agent.gen 20120802

Avast Win32:Trojan-gen 20120802

AVG Agent3.QZD 20120801

BitDefender - 20120802

ByteHero - 20120723

CAT-QuickHeal - 20120802

ClamAV - 20120802

Commtouch W32/Downldr2.EUSI 20120802

Comodo TrojWare.Win32.Downloader.Small.ai17 20120802

DrWeb Trojan.DownLoad.9874 20120802

Emsisoft Trojan.Win32.Webprefix!IK 20120802

eSafe Win32.Banker 20120731

ESET-NOD32 probably a variant of Win32/Agent.ENXGQDJ 20120801

F-Prot W32/Downldr2.EUSI 20120801

F-Secure Trojan.Generic.5848025 20120802

Fortinet W32/Malware_fam.NB 20120802

GData Win32:Trojan-gen 20120802

Ikarus Trojan.Win32.Webprefix 20120802

Jiangmin TrojanDownloader.Agent.aryi 20120802

K7AntiVirus Riskware 20120801

Kaspersky Trojan-Downloader.Win32.Agent.akwa 20120802

McAfee Artemis!4DE0067C485E 20120802

McAfee-GW-Edition Artemis!4DE0067C485E 20120801

Microsoft - 20120802

Norman Suspicious_Gen2.OIBED 20120801

nProtect - 20120801

Panda Adware/InternetSpeedMonitor 20120801

Rising Trojan.Win32.Generic.127897C1 20120802

Sophos Mal/Generic-L 20120802

SUPERAntiSpyware - 20120802

Symantec Trojan Horse 20120802

TheHacker - 20120801

TotalDefense - 20120801

TrendMicro TROJ_SPNR.08FD11 20120802

TrendMicro-HouseCall TROJ_DLAGENT.SM3 20120802

VIPRE Trojan.Win32.Generic!BT 20120802

ViRobot - 20120802

VirusBuster Trojan.Agent!yx5NLOBQo1I

[MarkH]

Hi MarkH, welcome to IObit Forum! :-D

 

Your case is not the same as jbooth's.

 

I will let IObit to follow up and deal with your case, but did you check those files if any other engine flags them as malware or virus in VirusTotal?

 

Since IMF has not flagged them as malware, probably uploding them to IObit Cloud will have the same result, but well worth of trying to see if there is any difference.

 

Also uploading the files to Wikisend and giving the download links to IObit (or here) for further investigation of IObit may help to speed up the matter.

 

BTW, thanks for the update of your profile, but still which versions of IObit products and other security softwares you are using is not clear.

 

Cheers.

 

Uploaded to cloud,negative result...

http://cloud.iobit.com/index.php?id=14bb8bdea22bac0516ee6fe6a5d1a23e674b075ceebeb96a0bf7a5990086ac06c524653c676f6e01ea521ab82a10423ea832c9907e0fc6258ab8d2f9a8936eae892861456c15d0&signature=0f5e0a5c264e14c78a

 

http://cloud.iobit.com/index.php?id=14bb8bdea22fa90411e66ee4a781fc3f354d040fb9eeee6c59a1f5ca57d2a0569e7163366e6f6e01ea521ab82a10422be020c9953b10872786a9d4bcb9d16aa59f&signature=0c7e7ea27a22882562 this has been flagged as a risk in the cloud analysis,but still hasnt been flagged by MFP during scan.