PC Review


Reply
Thread Tools Rate Thread

False Positive DameWare

 
 
Jay G.
Guest
Posts: n/a
 
      6th Jan 2005
The software detects Dameware as a threat. On a corporate
network, dameware is a valid tool used by us
administrators.

 
Reply With Quote
 
 
 
 
Bill Sanderson
Guest
Posts: n/a
 
      6th Jan 2005
Thanks - this IS the group to report false positives in. A bit more detail
would be useful, if possible, product versions, or what it is detected as,
perhaps?

In this case, I'm guessing that this is a remote control package which is,
of course, a two-edged sword. Is the description you see of the threat
appropriate? Feedback about those descriptions is likely to be helpful, I'd
think.

"Jay G." <(E-Mail Removed)> wrote in message
news:101a01c4f42b$7e418250$(E-Mail Removed)...
> The software detects Dameware as a threat. On a corporate
> network, dameware is a valid tool used by us
> administrators.
>



 
Reply With Quote
 
Guest
Posts: n/a
 
      7th Jan 2005
it is set at default to ignore. and if u read the
description it says that it detected that it may have
been installed by an administrator and should be left on
the computer. its good to read things before u start
deleteing them or anything.
>-----Original Message-----
>Thanks - this IS the group to report false positives

in. A bit more detail
>would be useful, if possible, product versions, or what

it is detected as,
>perhaps?
>
>In this case, I'm guessing that this is a remote control

package which is,
>of course, a two-edged sword. Is the description you

see of the threat
>appropriate? Feedback about those descriptions is

likely to be helpful, I'd
>think.
>
>"Jay G." <(E-Mail Removed)> wrote in message
>news:101a01c4f42b$7e418250$(E-Mail Removed)...
>> The software detects Dameware as a threat. On a

corporate
>> network, dameware is a valid tool used by us
>> administrators.
>>

>
>
>.
>

 
Reply With Quote
 
Bill Sanderson
Guest
Posts: n/a
 
      7th Jan 2005
It sounds like the default is appropriate.

I'm pleased that any RAT (Remote Administration Tool) is detected, since
these things historically have been abused.

I'm sure that if/when these tools are packaged for enterprise use, the admin
will have control of how such tools are listed.

<(E-Mail Removed)> wrote in message
news:0bfd01c4f451$3bf1fee0$(E-Mail Removed)...
> it is set at default to ignore. and if u read the
> description it says that it detected that it may have
> been installed by an administrator and should be left on
> the computer. its good to read things before u start
> deleteing them or anything.
>>-----Original Message-----
>>Thanks - this IS the group to report false positives

> in. A bit more detail
>>would be useful, if possible, product versions, or what

> it is detected as,
>>perhaps?
>>
>>In this case, I'm guessing that this is a remote control

> package which is,
>>of course, a two-edged sword. Is the description you

> see of the threat
>>appropriate? Feedback about those descriptions is

> likely to be helpful, I'd
>>think.
>>
>>"Jay G." <(E-Mail Removed)> wrote in message
>>news:101a01c4f42b$7e418250$(E-Mail Removed)...
>>> The software detects Dameware as a threat. On a

> corporate
>>> network, dameware is a valid tool used by us
>>> administrators.
>>>

>>
>>
>>.
>>



 
Reply With Quote
 
Derek Knight
Guest
Posts: n/a
 
      8th Jan 2005
Every antitrojan or antispyware I know of detects dameware as a "Possible"
risk

It is well known as being capable of being used as a bad tool in the open
rather than as intended as a corporate tool


"Bill Sanderson" <(E-Mail Removed)> wrote in message
news:t%(E-Mail Removed)...
> It sounds like the default is appropriate.
>
> I'm pleased that any RAT (Remote Administration Tool) is detected, since
> these things historically have been abused.
>
> I'm sure that if/when these tools are packaged for enterprise use, the
> admin will have control of how such tools are listed.
>
> <(E-Mail Removed)> wrote in message
> news:0bfd01c4f451$3bf1fee0$(E-Mail Removed)...
>> it is set at default to ignore. and if u read the
>> description it says that it detected that it may have
>> been installed by an administrator and should be left on
>> the computer. its good to read things before u start
>> deleteing them or anything.
>>>-----Original Message-----
>>>Thanks - this IS the group to report false positives

>> in. A bit more detail
>>>would be useful, if possible, product versions, or what

>> it is detected as,
>>>perhaps?
>>>
>>>In this case, I'm guessing that this is a remote control

>> package which is,
>>>of course, a two-edged sword. Is the description you

>> see of the threat
>>>appropriate? Feedback about those descriptions is

>> likely to be helpful, I'd
>>>think.
>>>
>>>"Jay G." <(E-Mail Removed)> wrote in message
>>>news:101a01c4f42b$7e418250$(E-Mail Removed)...
>>>> The software detects Dameware as a threat. On a

>> corporate
>>>> network, dameware is a valid tool used by us
>>>> administrators.
>>>>
>>>
>>>
>>>.
>>>

>
>



 
Reply With Quote
 
Guest
Posts: n/a
 
      8th Jan 2005
I agree with most of the comments about Remote Controls.
However, not all Remote Controls are detected. Since all
remote controls can be misused shouldn't they all be
detected?

It is very suspicious that a few escape the detection. In
particular when many of the detected Remote Controls are
either free or have a reasonable fee and license
agreement and in most cases work better.

Microsoft should not try to control the market place by
being selective on detection when offering a service such
as an Anti-Spyware service.



>-----Original Message-----
>Every antitrojan or antispyware I know of detects

dameware as a "Possible"
>risk
>
>It is well known as being capable of being used as a bad

tool in the open
>rather than as intended as a corporate tool
>
>
>"Bill Sanderson" <(E-Mail Removed)>

wrote in message
>news:t%

(E-Mail Removed)...
>> It sounds like the default is appropriate.
>>
>> I'm pleased that any RAT (Remote Administration Tool)

is detected, since
>> these things historically have been abused.
>>
>> I'm sure that if/when these tools are packaged for

enterprise use, the
>> admin will have control of how such tools are listed.
>>
>> <(E-Mail Removed)> wrote in message
>> news:0bfd01c4f451$3bf1fee0$(E-Mail Removed)...
>>> it is set at default to ignore. and if u read the
>>> description it says that it detected that it may have
>>> been installed by an administrator and should be left

on
>>> the computer. its good to read things before u start
>>> deleteing them or anything.
>>>>-----Original Message-----
>>>>Thanks - this IS the group to report false positives
>>> in. A bit more detail
>>>>would be useful, if possible, product versions, or

what
>>> it is detected as,
>>>>perhaps?
>>>>
>>>>In this case, I'm guessing that this is a remote

control
>>> package which is,
>>>>of course, a two-edged sword. Is the description you
>>> see of the threat
>>>>appropriate? Feedback about those descriptions is
>>> likely to be helpful, I'd
>>>>think.
>>>>
>>>>"Jay G." <(E-Mail Removed)> wrote in message
>>>>news:101a01c4f42b$7e418250$(E-Mail Removed)...
>>>>> The software detects Dameware as a threat. On a
>>> corporate
>>>>> network, dameware is a valid tool used by us
>>>>> administrators.
>>>>>
>>>>
>>>>
>>>>.
>>>>

>>
>>

>
>
>.
>

 
Reply With Quote
 
Bill Sanderson
Guest
Posts: n/a
 
      8th Jan 2005
Specifics? What remote controls aren't detected and should be?

Submit a suspected spyware report from a machine with such a remote control
installed and tell them about it.


<(E-Mail Removed)> wrote in message
news:114b01c4f5b7$9a033be0$(E-Mail Removed)...
>I agree with most of the comments about Remote Controls.
> However, not all Remote Controls are detected. Since all
> remote controls can be misused shouldn't they all be
> detected?
>
> It is very suspicious that a few escape the detection. In
> particular when many of the detected Remote Controls are
> either free or have a reasonable fee and license
> agreement and in most cases work better.
>
> Microsoft should not try to control the market place by
> being selective on detection when offering a service such
> as an Anti-Spyware service.
>
>
>
>>-----Original Message-----
>>Every antitrojan or antispyware I know of detects

> dameware as a "Possible"
>>risk
>>
>>It is well known as being capable of being used as a bad

> tool in the open
>>rather than as intended as a corporate tool
>>
>>
>>"Bill Sanderson" <(E-Mail Removed)>

> wrote in message
>>news:t%

> (E-Mail Removed)...
>>> It sounds like the default is appropriate.
>>>
>>> I'm pleased that any RAT (Remote Administration Tool)

> is detected, since
>>> these things historically have been abused.
>>>
>>> I'm sure that if/when these tools are packaged for

> enterprise use, the
>>> admin will have control of how such tools are listed.
>>>
>>> <(E-Mail Removed)> wrote in message
>>> news:0bfd01c4f451$3bf1fee0$(E-Mail Removed)...
>>>> it is set at default to ignore. and if u read the
>>>> description it says that it detected that it may have
>>>> been installed by an administrator and should be left

> on
>>>> the computer. its good to read things before u start
>>>> deleteing them or anything.
>>>>>-----Original Message-----
>>>>>Thanks - this IS the group to report false positives
>>>> in. A bit more detail
>>>>>would be useful, if possible, product versions, or

> what
>>>> it is detected as,
>>>>>perhaps?
>>>>>
>>>>>In this case, I'm guessing that this is a remote

> control
>>>> package which is,
>>>>>of course, a two-edged sword. Is the description you
>>>> see of the threat
>>>>>appropriate? Feedback about those descriptions is
>>>> likely to be helpful, I'd
>>>>>think.
>>>>>
>>>>>"Jay G." <(E-Mail Removed)> wrote in message
>>>>>news:101a01c4f42b$7e418250$(E-Mail Removed)...
>>>>>> The software detects Dameware as a threat. On a
>>>> corporate
>>>>>> network, dameware is a valid tool used by us
>>>>>> administrators.
>>>>>>
>>>>>
>>>>>
>>>>>.
>>>>>
>>>
>>>

>>
>>
>>.
>>



 
Reply With Quote
 
Guest
Posts: n/a
 
      10th Jan 2005

>>Specifics?


Microsoft SMS Remote Control
Symantec pcAnywhere both light and normal install.

>>What remote controls aren't detected and should be?


You should read Microsoft's "Criteria for detection as
spyware"
http://support.microsoft.com/kb/892340
all remote controls falls within these criterias.


>>Submit a suspected spyware report
>>from a machine with such a remote
>>control installed and tell them about it.


No report is needed, they are simply NOT detected.



>-----Original Message-----
>Specifics? What remote controls aren't detected and

should be?
>
>Submit a suspected spyware report from a machine with

such a remote control
>installed and tell them about it.
>
>
><(E-Mail Removed)> wrote in message
>news:114b01c4f5b7$9a033be0$(E-Mail Removed)...
>>I agree with most of the comments about Remote Controls.
>> However, not all Remote Controls are detected. Since

all
>> remote controls can be misused shouldn't they all be
>> detected?
>>
>> It is very suspicious that a few escape the detection.

In
>> particular when many of the detected Remote Controls

are
>> either free or have a reasonable fee and license
>> agreement and in most cases work better.
>>
>> Microsoft should not try to control the market place by
>> being selective on detection when offering a service

such
>> as an Anti-Spyware service.
>>
>>
>>
>>>-----Original Message-----
>>>Every antitrojan or antispyware I know of detects

>> dameware as a "Possible"
>>>risk
>>>
>>>It is well known as being capable of being used as a

bad
>> tool in the open
>>>rather than as intended as a corporate tool
>>>
>>>
>>>"Bill Sanderson" <(E-Mail Removed)>

>> wrote in message
>>>news:t%

>>

(E-Mail Removed)...
>>>> It sounds like the default is appropriate.
>>>>
>>>> I'm pleased that any RAT (Remote Administration Tool)

>> is detected, since
>>>> these things historically have been abused.
>>>>
>>>> I'm sure that if/when these tools are packaged for

>> enterprise use, the
>>>> admin will have control of how such tools are listed.
>>>>
>>>> <(E-Mail Removed)> wrote in

message
>>>> news:0bfd01c4f451$3bf1fee0$(E-Mail Removed)...
>>>>> it is set at default to ignore. and if u read the
>>>>> description it says that it detected that it may

have
>>>>> been installed by an administrator and should be

left
>> on
>>>>> the computer. its good to read things before u

start
>>>>> deleteing them or anything.
>>>>>>-----Original Message-----
>>>>>>Thanks - this IS the group to report false positives
>>>>> in. A bit more detail
>>>>>>would be useful, if possible, product versions, or

>> what
>>>>> it is detected as,
>>>>>>perhaps?
>>>>>>
>>>>>>In this case, I'm guessing that this is a remote

>> control
>>>>> package which is,
>>>>>>of course, a two-edged sword. Is the description

you
>>>>> see of the threat
>>>>>>appropriate? Feedback about those descriptions is
>>>>> likely to be helpful, I'd
>>>>>>think.
>>>>>>
>>>>>>"Jay G." <(E-Mail Removed)> wrote in message
>>>>>>news:101a01c4f42b$7e418250$(E-Mail Removed)...
>>>>>>> The software detects Dameware as a threat. On a
>>>>> corporate
>>>>>>> network, dameware is a valid tool used by us
>>>>>>> administrators.
>>>>>>>
>>>>>>
>>>>>>
>>>>>>.
>>>>>>
>>>>
>>>>
>>>
>>>
>>>.
>>>

>
>
>.
>

 
Reply With Quote
 
Bill Sanderson
Guest
Posts: n/a
 
      10th Jan 2005
I agree that they should be reported.

It would help if folks with machines with these installed would submit
suspected spyware reports and describe the issue.

Thats one way to bring the issue to Microsoft's attention.


<(E-Mail Removed)> wrote in message
news:14da01c4f6c9$4d67bc80$(E-Mail Removed)...
>
>>>Specifics?

>
> Microsoft SMS Remote Control
> Symantec pcAnywhere both light and normal install.
>
>>>What remote controls aren't detected and should be?

>
> You should read Microsoft's "Criteria for detection as
> spyware"
> http://support.microsoft.com/kb/892340
> all remote controls falls within these criterias.
>
>
>>>Submit a suspected spyware report
>>>from a machine with such a remote
>>>control installed and tell them about it.

>
> No report is needed, they are simply NOT detected.
>
>
>
>>-----Original Message-----
>>Specifics? What remote controls aren't detected and

> should be?
>>
>>Submit a suspected spyware report from a machine with

> such a remote control
>>installed and tell them about it.
>>
>>
>><(E-Mail Removed)> wrote in message
>>news:114b01c4f5b7$9a033be0$(E-Mail Removed)...
>>>I agree with most of the comments about Remote Controls.
>>> However, not all Remote Controls are detected. Since

> all
>>> remote controls can be misused shouldn't they all be
>>> detected?
>>>
>>> It is very suspicious that a few escape the detection.

> In
>>> particular when many of the detected Remote Controls

> are
>>> either free or have a reasonable fee and license
>>> agreement and in most cases work better.
>>>
>>> Microsoft should not try to control the market place by
>>> being selective on detection when offering a service

> such
>>> as an Anti-Spyware service.
>>>
>>>
>>>
>>>>-----Original Message-----
>>>>Every antitrojan or antispyware I know of detects
>>> dameware as a "Possible"
>>>>risk
>>>>
>>>>It is well known as being capable of being used as a

> bad
>>> tool in the open
>>>>rather than as intended as a corporate tool
>>>>
>>>>
>>>>"Bill Sanderson" <(E-Mail Removed)>
>>> wrote in message
>>>>news:t%
>>>

> (E-Mail Removed)...
>>>>> It sounds like the default is appropriate.
>>>>>
>>>>> I'm pleased that any RAT (Remote Administration Tool)
>>> is detected, since
>>>>> these things historically have been abused.
>>>>>
>>>>> I'm sure that if/when these tools are packaged for
>>> enterprise use, the
>>>>> admin will have control of how such tools are listed.
>>>>>
>>>>> <(E-Mail Removed)> wrote in

> message
>>>>> news:0bfd01c4f451$3bf1fee0$(E-Mail Removed)...
>>>>>> it is set at default to ignore. and if u read the
>>>>>> description it says that it detected that it may

> have
>>>>>> been installed by an administrator and should be

> left
>>> on
>>>>>> the computer. its good to read things before u

> start
>>>>>> deleteing them or anything.
>>>>>>>-----Original Message-----
>>>>>>>Thanks - this IS the group to report false positives
>>>>>> in. A bit more detail
>>>>>>>would be useful, if possible, product versions, or
>>> what
>>>>>> it is detected as,
>>>>>>>perhaps?
>>>>>>>
>>>>>>>In this case, I'm guessing that this is a remote
>>> control
>>>>>> package which is,
>>>>>>>of course, a two-edged sword. Is the description

> you
>>>>>> see of the threat
>>>>>>>appropriate? Feedback about those descriptions is
>>>>>> likely to be helpful, I'd
>>>>>>>think.
>>>>>>>
>>>>>>>"Jay G." <(E-Mail Removed)> wrote in message
>>>>>>>news:101a01c4f42b$7e418250$(E-Mail Removed)...
>>>>>>>> The software detects Dameware as a threat. On a
>>>>>> corporate
>>>>>>>> network, dameware is a valid tool used by us
>>>>>>>> administrators.
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>.
>>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>>.
>>>>

>>
>>
>>.
>>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
false positive ? CalmCookie Security Signatures 6 25th Dec 2005 07:32 PM
False Positive? Marcus Anti-Virus 15 11th Sep 2005 09:45 PM
False positive - Dameware Richard Ling Security Signatures 4 19th Apr 2005 04:30 PM
False Positive JustMe Spyware Discussion 0 7th Jan 2005 03:03 PM
False Positive? Barb Spyware Discussion 0 7th Jan 2005 12:01 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 02:30 PM.