Jump to content
Sign in to follow this  
whatmeworry

Legit files identified as Trojan Hoster

Recommended Posts

Yesterday, I downloaded the free version of SAS and ran a full scan. SAS identified a few tracking cookies, which didn't surprise or concern me, but it also identified something called Trojan Hoster, which consisted of two files:

Trojan.Hoster

C:\WINDOWS\SYSTEM32\ESCLICWD.DLL

C:\WINDOWS\SYSTEM32\ESCSIRIBBON.DLL

I was surprised, since I had just run a full scan with Malwarebytes Anti-Malware Pro, and it hadn't turned up Trojan Hoster. I wrote to the Malwarebytes forum to ask why SAS had found this and MBAM had not. They had me upload the files to them. They examined them and reported that these were not malicious files but were part of a program called StampIt. That made sense to me, since I own StampIt (http://www.stampitnet.com/) and it had been acting VERY strangely yesterday. After the Malwarebytes tech support told me that the files I sent them were part of StampIt, I understood why the program had been acting strangely--SAS had removed two of its files. I'm writing to let you know, so you can adjust your database.

Share this post


Link to post
Share on other sites

Thanks for your response. I updated the definitions to the most recent, ran another scan which again flagged "Trojan Hoster," and submitted a False Positive report, as you instructed.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.
Sign in to follow this  

×
×
  • Create New...