Update list shown currently unavailable

[siljaline]

I was aware of that, but thanks anyway.

What I'm looking for are the exact criteria (e.g. filenames, hashes,...) which are used to identify this "Phoenix" keylogger.
As I said, I just want to make sure, it's a false positive!

I don't believe it is an F/P but I'll let the powers that be address your query.

Regards,
Silj

[Elandril]

I'm fairly sure now, that this is an false positive!
Have a look at here, where they describe exactly the same file that was found on my computer.
I also scanned it via virusscan.jotti.org and every scanner reported a clean file!

I hope someone read this here - if not, I'll try to repost this as a separate thread! :D

[siljaline]

Elandril wrote:

I hope someone read this here - if not, I'll try to repost this as a separate thread! :D

You should since I don't believe your thread has any connection with the original post.

Silj

[Elandril]

i just posted on the false positives forum! :D

[Tattenbach]

I do have the same situation (the file setup1.exe reported as containing the phoneix keylogger).

I believe the detection is a false positive too and hopefully somebody will confirm or deny this assumption soon and stop debating about if this is or not the right place to post the query.

Setup1.exe
Description: Visual Basic 6.0 Setup Toolkit
Size: 280 KB (286,720 bytes)

If you want I can post a hex dump.

[Elandril]

It has been confirmed as a false positive (see here)!

[Tattenbach]

Thanks @ Elandril.