MS Antispyware detects Catalyst as trojan

[Discordia]

I reinstalled XP Pro, put in the ATI drivers, installed Microsoft
AntiSpyware Beta1, and run it. It detected many of the Catalyst
drivers (the most recent) as "Unclassified.Trojan.93". I let the
program remove the drivers, now, of course, Catalyst doesn't work.
Anyone else come across this?

 

[DaveL]

Huh? I'd trust the Cats before I'd trust an MS beta. The cats may be a lot
of things but they definitely are not Trojans. You seem rather gullible.

DaveL

 

[Brian Dickens]

Huh? I'd trust the Cats before I'd trust an MS beta. The cats may
be a lot of things but they definitely are not Trojans. You seem
rather gullible.

It all depends on where he downloaded the Catalyst drivers. If he downloaded
from any other site than ATi's, it might very well be that he downloaded
infected drivers. In this case, he'd better go to www.ati.com to get the
drivers from them.

=- Brian Dickens, the Netherlands

 

[Chris Curtis]

Huh? I'd trust the Cats before I'd trust an MS beta.

Quite possibly but I do know that over the past few months since using this
'beta' software Spybot hasn't found a single nasty.
And it certainly didn't detect files from my recent download of 3.7 as
trojans!

Chris

 

[Smart Feet]

Quite possibly but I do know that over the past few months since using this
'beta' software Spybot hasn't found a single nasty.

Really? My experience is quite different. Microsoft AntiSpyware rarely
finds anything. Borderline useless, but I run it as long as it is free.
Spybot always finds a few things that Microsoft's knew nothing about,
and Ad-Aware SE Plus is the best and always finds something the other
two miss.

 

[Timothy J. Walters]

yeah it finds cookies!

oh noes

not cookies!

Really? My experience is quite different. Microsoft AntiSpyware rarely
finds anything. Borderline useless, but I run it as long as it is free.
Spybot always finds a few things that Microsoft's knew nothing about, and
Ad-Aware SE Plus is the best and always finds something the other two
miss.

 

[Timothy J. Walters]

i cant believe you actually let this thing delete your video driver files

i can just see you sitting there pannicking DELETE DELETE DELETE!!

 

[Chris Curtis]

Really? My experience is quite different. Microsoft AntiSpyware rarely
finds anything. Borderline useless, but I run it as long as it is free.
Spybot always finds a few things that Microsoft's knew nothing about, and
Ad-Aware SE Plus is the best and always finds something the other two
miss.

That used to be my experience when it was first launched but I run the beta
program together with Spybot on 2 machines at home and on 17 workstations at
work and for the last few weeks Spybot has found nothing. Adaware usually
finds something but then it is looking for different things.
Perhaps it depends on where you visit

Chris

 

[Discordia]

On Sat, 6 Aug 2005 23:25:08 +0200, "Brian Dickens"

That's where I did get them.

 

[Discordia]

On Sat, 6 Aug 2005 19:44:45 -0400, "Timothy J. Walters"

Hardly panicking. I know I can reinstall them...I'm trying to
determine if this is the source of the "trojan". FYI, like I've said,
this was on a freshly installed system, the only thing I had
downloaded was the MS AntiSpyware and the ATI drivers.

 

[Augustus]

I reinstalled XP Pro, put in the ATI drivers, installed Microsoft
AntiSpyware Beta1, and run it. It detected many of the Catalyst
drivers (the most recent) as "Unclassified.Trojan.93". I let the
program remove the drivers, now, of course, Catalyst doesn't work.
Anyone else come across this?

I downloaded and installed the original beta when it came out. I was
initially impressed...it picked up things that Spybot and Adaware did not.
But, over the months, MS continually updated it's hitlist and detection
rules.....and what's happened is that many of the spyware vendors and ad
companies have petitioned MS to remove their particular "features" from the
detection rules and list. So, MSAntispy detects less and less. In fact, for
a two week period before I uninstalled it, it ran daily scans and found
nothing while Adaware and Spybot were finding things. I now use PestPatrol.
It picked up 16 items that the others missed. PestPatrol is my main
antispyware software now.

 

[Discordia]

An update. MS AntiSpyware's new definitions are detecting Catalyst
drivers as a trojan. This is being reported in the MS newsgroups. My
guess is that the Catalyst drivers actually do act as a type of tojan,
but designed that way by ATI. I'm just going to ignore the message
unless I hear otherwise.

 

[Discordia]

BTW, I suggest that anyone who doubts the validity of what I'm
reporting to make sure their MS AntiSpyware has the latest definition
(Aug 6) and run it on their Cat 5.7 system and see what they come up
with.

 

[Ed Medlin]

An update. MS AntiSpyware's new definitions are detecting Catalyst
drivers as a trojan. This is being reported in the MS newsgroups. My
guess is that the Catalyst drivers actually do act as a type of tojan,
but designed that way by ATI. I'm just going to ignore the message
unless I hear otherwise.

Since the new Catalysts/CCC use MS .Net Framework it may be that the MS
anti-spyware sees them as a trojan. I would just ignore it and go on. Other
spyware programs such as SpyBot, AdAware and Spython do not detect them that
way, so I wouldn't worry.


Ed

 

[/mel/]

I reinstalled XP Pro, put in the ATI drivers, installed Microsoft
AntiSpyware Beta1, and run it. It detected many of the Catalyst
drivers (the most recent) as "Unclassified.Trojan.93". I let the
program remove the drivers, now, of course, Catalyst doesn't work.
Anyone else come across this?

I can't comment on this specific problem, but with regard to MS anti-spyware
you might like to read the following and then decide whether you want to use
it at all: http://www.theregister.co.uk/2005/07/15/microsoft_claria/

 

[Discordia]

On Sun, 7 Aug 2005 17:48:19 +0100, "/mel/"

I don't think MS is very trustworthy. I lost most of my faith in that
company when its was first reported they'd be doing activation with
XP. Now that you have to do varification, I'm heading over to Apple.
I'd bet that MS has plans to do active spying on your computer with
this latest move.

 

[C16]

I think youll find thats because MS Anitspyware is doing its job and
stopping spyware getting installed in the first place. As for Pest Control
that thing just seems to randomly select alerts, it finds things that MS
Antispyware, Adaware, Spybot dont se and also when I go to check the items
its warning me about they are either not there or totally innocent files,
seems to have a very relaxed approach to scanning.

 

[John Moore]

I can't comment on this specific problem, but with regard to MS anti-spyware
you might like to read the following and then decide whether you want to use
it at all: http://www.theregister.co.uk/2005/07/15/microsoft_claria/

Yea, I knew about this BS quite some time ago and is why I uninstalled
MSAS from my PC. **** you Microsoft.

 

[Michael Walraven]

I have latest MS Antispyware (Aug 7,2005) and ati catalyst 5.7. I don't seem
to have any problem, MS never reports ATI as spyware.
I searched the GOOGLE groups for other threads on the subject but couldn't
drag up anything. Could you point me to
another thread on the MS newsgroups. This thread is the only one I can find
reporting the problem.

Michael

 

[Markeau]

Just installed ATI Catalyst 5.7, ran MS AS with updates as of 7aug05
and the results: no known issues detected