Smitfraud-C: Please confirm FP

[macstorm]

Hello experts,

Just updated to the today's latest definitions and Spybot detected 'Smitfraud-C' under this reg entry:
HKEY_USERS\S-1-5-21-1409082233-1957994488-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E5DF9D10-3B52-11D1-83E8-00A0C90DC849}

I'd like anyone to confirm if it's a false positive.
Scanned with Ad-Aware and Superantispyware = Clean

Thanks

[Stompaman]

Just updated to the today's latest definitions and Spybot detected 'Smitfraud-C' under this reg entry:
HKEY_USERS\S-1-5-21-1409082233-1957994488-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E5DF9D10-3B52-11D1-83E8-00A0C90DC849}

I'm getting exactly the same thing (though the S-1-5-21-..... number is different). I've tried some other scans:

Norton Antivirus scan - Clean
Kaspersky Online scan - Clean
Adaware scan - Clean
HJT scan - nothing suspicious seen
SmitfraudFix scan - nothing suspicious seen

I'm also not seeing any indication of Smitfraud-C as described in the Spybot Smitfraud-C description (i.e. changes to wallpaper etc.....).

So I too am wondering if it's a false positive?

Stompaman

[tashi]

Thank you for reporting, I will bring to our detectives attention.

[Yodama]

hi,

thanks for reporting it is a false positive. The change to the detection database will be effective with the next update.

[Stompaman]

thanks for reporting it is a false positive. The change to the detection database will be effective with the next update.

OK, thanks for confirming.

Stompaman

[bertkc]

I had this show up aswell I clicked fix it and it hasn't showed up since. I assume it deletes the registry is this going to affect my PC in a negative way since this infact wasnt a harmfull entry?

[bertkc]

anyone? this worries me :O

[tashi]

Hi bertkc.

Are you experiencing any problems?

I will ask a detective to respond, which will be Sunday evening, Monday, depending on time zones. :)

[bertkc]

hey man. No problems yet but I'm wondering if i reboot my system is going to have issues? Like is the registy entry that the user posted above vital to making windows and programs function properly. I'm just assuming that when I told it to fix the problem it deleted that entry. I just need to know if this is going to cause my problems.thanks

[Yodama]

hello,

the key reported above is not system critical, it actually is only a reference to another existing key and will be recreated if needed.