mr_stubble

Email from eTrust 25 minutes after I submitted the .rar archive downloaded from the website for their review: Detection of 'Win32/Ardamax.C!Trojan' is a confirmed False Alarm and its removal will be added to today's signature release 23.72.39 Regards, CA eTrust Antivirus Research and Response Group Thanks for everyone's help! And thanks again for this excellent software nitro322. It has saved me many an unnecessary install. I found it especially useful on my home PC last night extract needed files from installations to update my BartPE installation.

Yes, same error. Tried again this morning using both the downloaded file from the website (uniextract121_noinst.rar) and the file you uploaded for me (uniextract121_noinst_noupx.7z) and tried to extract the file from the archive to my HDD. eTrust picks it up and deletes uniextract.exe just as it goes to the temp file for copying to the destination folder. I tried to send the file to Computer Associates via their virus submittal program to have them take a look at it and maybe reevaluate their virus scanning engine, but I can't even extract the file long enough to archive and email it. Maybe I'll just send the whole installation archive...?

Downloaded and extracted the file from RapidShare as instructed. I appreciate all the effort, but eTrust still detects it as a trojan and deletes it.

I'm sorry, but your steps were not entirely clear. I followed them the best I could. The eTrust AV's real time scanning monitor deletes the file every time it appears ANYWHERE on my PC. I think contact may need to made by the developer to the AV companies having them re-check their virus definitions and stop reporting this false positive.

I have the latest version of UniversalExtractor installed on my jump drive. I had my drive connected to my PC all day yesterday with no problems. I leave at 1630. I come in this morning (to work) and eTrust Antivirus reports: ------------- The Win32/Ardamax.C!Trojan was detected in N:\UNIVERSAL EXTRACTOR\BIN\UNIEXTRACT.EXE. Machine: CE****, User: ***CIC\john.doe <-- My PC name and username here File Status: File was cured; system cure performed. ------------- eTrust Product Version: 7.1.501 Engine Information: InoculateIT w/ Signature Version: 23.72.35 Last update 06/12/2006 2116 Vet w/ Signature Version: 12.6.2253 Last update: 06/13/2006 0505 Hope you can get this straightened out with the AV folks. Let me know if I can do anything to help. Great program, and thanks!