Author Topic: CSpace & Macmakeup - FP  (Read 4425 times)

Offline realpockets

  • Newbie
  • *
  • Posts: 6
CSpace & Macmakeup - FP
« on: August 05, 2009, 03:47:38 PM »
Items/Files within the CSpace program have been detected as viruses.
*** they are only detected when the CSpace program activates them/begins using them ***

*File name: VNCClient.exe
Product site : http://cspace.in/
Name of detection : ApplicUnsaf.Win32.RemoteAdmin.WinVNC.4[at]5223414
CIS database number : 1877

*File name: xLMNPLGV.exe.part
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]25280958
CIS database number : 1877

*File name: TbYHDe+L.exe.part
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]25280958
CIS database number : 1877

*File name: CSpaceUpdatev1s0y9.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]25280958
CIS database number : 1877

*File name: CSpaceVNCServer.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]575674
CIS database number : 1877

*File name: CSpaceWinVNC.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]8235471
CIS database number : 1877

*File name: VNCHooks.dll
Product site : http://cspace.in/
Name of detection : Unclassifiedmalware[at]9061446
CIS database number : 1877

---------------------------

macmakeup.exe is detected as a virus.

Product site : http://www.gorlani.com/publicprj/macmakeup/macmakeup.asp
Name of detection : unclassifiedMalware[at]8394976
CIS database number : 1877

Offline realpockets

  • Newbie
  • *
  • Posts: 6
Re: CSpace & Macmakeup - FP
« Reply #1 on: August 05, 2009, 03:51:31 PM »
I'm not sure if I was to post my product version number but here it is;

Product Version : 3.10.102363.531

Offline Sonia Botezatu

  • Malware Research Group
  • Comodo Family Member
  • *****
  • Posts: 88
Re: CSpace & Macmakeup - FP
« Reply #2 on: August 05, 2009, 04:00:18 PM »
Hello,

Items/Files within the CSpace program have been detected as viruses.
*** they are only detected when the CSpace program activates them/begins using them ***

*File name: VNCClient.exe
Product site : http://cspace.in/
Name of detection : ApplicUnsaf.Win32.RemoteAdmin.WinVNC.4[at]5223414
CIS database number : 1877

*File name: xLMNPLGV.exe.part
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]25280958
CIS database number : 1877

*File name: TbYHDe+L.exe.part
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]25280958
CIS database number : 1877

*File name: CSpaceUpdatev1s0y9.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]25280958
CIS database number : 1877

*File name: CSpaceVNCServer.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]575674
CIS database number : 1877

*File name: CSpaceWinVNC.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]8235471
CIS database number : 1877

*File name: VNCHooks.dll
Product site : http://cspace.in/
Name of detection : Unclassifiedmalware[at]9061446
CIS database number : 1877

---------------------------

macmakeup.exe is detected as a virus.

Product site : http://www.gorlani.com/publicprj/macmakeup/macmakeup.asp
Name of detection : unclassifiedMalware[at]8394976
CIS database number : 1877

We will check the files and get back to you after investigation.

Regards,
Sonia Botezatu.

Offline realpockets

  • Newbie
  • *
  • Posts: 6
Re: CSpace & Macmakeup - FP
« Reply #3 on: August 05, 2009, 04:06:56 PM »
Thank you for your time and support.

-RP

Offline Sonia Botezatu

  • Malware Research Group
  • Comodo Family Member
  • *****
  • Posts: 88
Re: CSpace & Macmakeup - FP
« Reply #4 on: August 06, 2009, 09:32:55 AM »
Hello,

Items/Files within the CSpace program have been detected as viruses.
*** they are only detected when the CSpace program activates them/begins using them ***

*File name: VNCClient.exe
Product site : http://cspace.in/
Name of detection : ApplicUnsaf.Win32.RemoteAdmin.WinVNC.4[at]5223414
CIS database number : 1877

*File name: xLMNPLGV.exe.part
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]25280958
CIS database number : 1877

*File name: TbYHDe+L.exe.part
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]25280958
CIS database number : 1877

*File name: CSpaceUpdatev1s0y9.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]25280958
CIS database number : 1877

*File name: CSpaceVNCServer.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]575674
CIS database number : 1877

*File name: CSpaceWinVNC.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]8235471
CIS database number : 1877

*File name: VNCHooks.dll
Product site : http://cspace.in/
Name of detection : Unclassifiedmalware[at]9061446
CIS database number : 1877

---------------------------

macmakeup.exe is detected as a virus.

Product site : http://www.gorlani.com/publicprj/macmakeup/macmakeup.asp
Name of detection : unclassifiedMalware[at]8394976
CIS database number : 1877

The above mentioned files were confirmed as follows:

*File name: VNCClient.exe
Product site : http://cspace.in/
Name of detection : ApplicUnsaf.Win32.RemoteAdmin.WinVNC.4[at]5223414
CIS database number : 1877

- not FP, it is a potentially unsafe application;


*File name: xLMNPLGV.exe.part
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]25280958
CIS database number : 1877

*File name: TbYHDe+L.exe.part
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]25280958
CIS database number : 1877

*File name: CSpaceUpdatev1s0y9.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]25280958
CIS database number : 1877

*File name: CSpaceWinVNC.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]8235471
CIS database number : 1877

*File name: VNCHooks.dll
Product site : http://cspace.in/
Name of detection : Unclassifiedmalware[at]9061446
CIS database number : 1877

Product site : http://www.gorlani.com/publicprj/macmakeup/macmakeup.asp
Name of detection : unclassifiedMalware[at]8394976
CIS database number : 1877

- files are potentially  unsafe applications and their name of detection has been updated.


For this file:
*File name: CSpaceVNCServer.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]575674
CIS database number : 1877
detection name is incomplete. Please submit it again so we can clarify its status.

Thank you,
Sonia Botezatu.
 

Offline realpockets

  • Newbie
  • *
  • Posts: 6
Re: CSpace & Macmakeup - FP
« Reply #5 on: August 06, 2009, 03:14:08 PM »
For this file:

*File name: CSpaceVNCServer.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]5756749
CIS database number : 1877

R-P

Offline Sonia Botezatu

  • Malware Research Group
  • Comodo Family Member
  • *****
  • Posts: 88
Re: CSpace & Macmakeup - FP
« Reply #6 on: August 06, 2009, 03:25:04 PM »
Hello,

For this file:

*File name: CSpaceVNCServer.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]5756749
CIS database number : 1877

R-P

Thank you for your submission. We will get back to you after analysis.

Regards,
Sonia Botezatu

shaogang.he

  • Guest
Re: CSpace & Macmakeup - FP
« Reply #7 on: August 07, 2009, 02:52:32 AM »
For this file:

*File name: CSpaceVNCServer.exe
Product site : http://cspace.in/
Name of detection : UnclassifiedMalware[at]5756749
CIS database number : 1877

R-P
Hi,realpockets
The file is potentially,  unsafe applications and their name of detection will update,pls wait the update
Thanks
Shaogang

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek