Results 1 to 2 of 2

Thread: False Positive? ZASS thinks my SnapStream FireFly driver is Win32.WeatherCheck trojan?

  1. #1
    sparhawksdotcom Guest

    Default False Positive? ZASS thinks my SnapStream FireFly driver is Win32.WeatherCheck trojan?

    For the last 2 days, every time ZASS scans my system, ZoneAlarm Internet Security Suite 7.0.302.000 alerts me to the following:

    [B]1 Active Item(s)[B]
    Win32.WeatherCheck
    Risk: Medium

    Detail: RegistryKey: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{001000A F-2DEF-0103-10B6-DC5BA692C858}
    Important note: There are 5 Registry Keys with that exact name. Every one of them references files needed by my SnapStream FireFly UHF remote. If I select 'Quarantine' or 'Delete', then my remote control is disabled until I reinstall my remote control driver.

    If I reinstall my remote control driver and then run a full system scan with ZASS, it again detects my remote control driver (installed from the CD, and the computer without an active internet connection) as the same Trojan.

    I don't know if it is related, but something else funky is going on here. If I am using BeyondTV (my DVR software) with my remote control, then TASKMGR.EXE shows in the Task Manager as using 90-95% of CPU cycles. This only occurs while the remote control driver is installed and BeyondTV is running. Could this be the result of a possible Trojan infection of the remote control driver?



    Help, please!

    Operating System:Windows XP Home Edition
    Product Name:ZoneAlarm Internet Security Suite
    Software Version:7.0

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,716

    Default Re: False Positive? ZASS thinks my SnapStream FireFly driver is Win32.WeatherCheck trojan?

    Hi!who is exactly detecting the Trojan? Is it the Antivirus or Antipsyware?You can check it in the "Alerts and Logs" Tab --> Log viewer --> Alert type "antivirus" or "antispyware".It looks like it is a detection by the ZA Antispyware:See here how to report a possible false positives (under the False Positives Detection heading):http://smartdefense.zonelabs.com/tmp..._reporting.jspFax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •