Lexmark printer driver - ABetterInternet

[rwurth]

I consistently get reports of an ABetterInternet infection that seem to occur after I use my Lexmark X7350 printer/scanner/fax as a printer. It appears that a driver uses a registry key that has the same name as an ABetterInternet key.

The report is:
ABetterInternet: Autorun settings (LXCICATS) (Registry value, fixed) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\LXCICATS

The value associated with that key is
rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCItime.dll,_RunDLLEntry@16

[tashi]

Hello.

I have brought this issue to Team's attention, thank you for reporting.

[Yodama]

thanks for reporting,

this does look like a false positive,
@rwurth
which version of Spybot are you using?
could you post a complete scanning log?

[spybotsandra]

Hello,

You seem to be using a dated version of Spybot-S&D.
Please download our current version Spybot - Search & Destroy 1.4. That should fix it.
You will find links to several download locations for this new version on our web site:
http://www.safer-networking.org/en/mirrors/index.html
Please search for new updates after installing Spybot-S&D 1.4.

Best regards
Sandra
Team Spybot