I.T. Mate
                      Product Support
Menu: Home | Blog | Contact Us | Documents | Forums | Knowledge Base | Search | Services RSS

Quick Search
 

Products
AB Extension Pack
ACF Notes
ActiveScan Cleaner
B Gone
Bit Defender Cleaner
Black Jack
Chess
Cookie Info
Cup Holder
Dir 2 File
DUN AC
FreeScan Cleaner
Guestbook Generator
Housecall Cleaner
hpHosts
hpObserver
Index.dat QV
Index.dat Suite
ISPs Nightmare
Mouse Mat
Outlook Export
PUI
Quick Info
Quick Ren
RF Types
Rip Wiz 2003
S Lock
SMTP Finder
Spambot Search Tool
vURL Desktop Edition
Home > Knowledge Base > PestPatrol reports Index.dat Suite uninstall file (unins(n).exe) as "Actual Spy" keylogger (KBID# 29)

I.T. Mate Knowledge Base - KBID# 29

PestPatrol reports Index.dat Suite uninstall file (unins(n).exe) as "Actual Spy" keylogger (KBID# 29)

Symptoms

PestPatrol reports finding the "Actual Spy" keylogger in the Index.dat Suite uninstallation file (unins(n).exe*)

*Where (n) is a three digit number (e.g. unins000.exe)


Cause

This is a false positive within the PestPatrol signature files and according to my research, is caused by the fact Index.dat Suite shares the same installer as the "Actual Spy" keylogger.

Resolution

A call was placed to the PestPatrol head office on August 10th 2005 to report this issue and the advise given for those experiencing this issue, is to report the issue to Computer Associates via the online technical support form;

http://supportconnectw.ca.com/public/ca_common_docs/pestpatrol_request.asp

Additional Information

Jorge R. Hernandez has written to provide a temporary work-around for this issue, until such time as Computer Associates resolve the false positive.

"The workaround is to Exclude the file by adding C:\Program Files\Index.dat Suite\unins000.exe to the Options panel, What to Exclude tab (attached screen capture). As you can see, yours is not the only program and/or file that I had to exclude. Never heard anything back from PestPatrol, after making them aware, when I found False Positives in ActivePDF and Pixie. That's why I will not be renewing their product once my license expires.

Jorge R. Hernandez"


Screenshot provided: http://support.it-mate.co.uk/images/imgKBID29_CA_PP_ASFP.gif



References

eTrust Spyware Encyclopedia - Actual Spy
http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453086496

Computer Associates
http://www.ca.com/uk/

Computer Associates Support Connect
http://supportconnect.ca.com/sc/support/Index


The information in this article applies to:
  1. Index.dat Suite
Published: 10/08/2005 17:43:04
Updated: 10/08/2005 19:13:08

Print this document | E-mail this document

Give us Feedback! Forums
End User Licence Agreement | Help Us | Privacy Policy | Terms of Use
Copyright 1998 - 2017 I.T. Mate - All Rights Reserved
counselling-valvate
counselling-valvate
counselling-valvate
counselling-valvate
Give us Feedback! Forums