Port_H
2007-09-27, 14:42
Hello. I'm a Spybot user from Portugal. Since more than 2 years that I use this program, because I think it confers an important additional layer of protection to Internet explorer, making it more safer to navigate the Web. Today I upgraded from version 1.4 to version 1.5. I have some few questions reguarding the program. I'll post them separately in different threads.
Question 1. The Spybot tool "ActiveX" show me 3 ActiveX applications with the same name and MD5 installed in my system. When opening Spybot for the first time, only one of them is classified as legitimate, but opening Spybot a second time, all 3 are then classified by the program as legitimate (which i think kind of strange). I don't know if i should try to uninstall the ones that are redundant, or if they pose some kind of threat or could cause instability to my browser. I copied the following from "SpybotSD.ActiveX report.txt" created by me when running Spybot the first time after reinstalling it:
{8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_02
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
description: Sun Java
classification: Legitimate
known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
info link:
info source: Patrick M. Kolla
Path: C:\Programas\Java\jre1.6.0_02\bin\
Long name: npjpi160_02.dll
Short name: NPJPI1~1.DLL
Date (created): 12-07-2007 2:22:38
Date (last access): 27-09-2007 8:50:00
Date (last write): 12-07-2007 4:00:36
Filesize: 132496
Attributes: archive
MD5: E3811F1A1C5063C941EC0E2766C3EA39
CRC32: AEFD3747
Version: 6.0.20.6
{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_02
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
Path: C:\Programas\Java\jre1.6.0_02\bin\
Long name: npjpi160_02.dll
Short name: NPJPI1~1.DLL
Date (created): 12-07-2007 2:22:38
Date (last access): 27-09-2007 8:50:00
Date (last write): 12-07-2007 4:00:36
Filesize: 132496
Attributes: archive
MD5: E3811F1A1C5063C941EC0E2766C3EA39
CRC32: AEFD3747
Version: 6.0.20.6
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_02
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
Path: C:\Programas\Java\jre1.6.0_02\bin\
Long name: npjpi160_02.dll
Short name: NPJPI1~1.DLL
Date (created): 12-07-2007 2:22:38
Date (last access): 27-09-2007 8:50:00
Date (last write): 12-07-2007 4:00:36
Filesize: 132496
Attributes: archive
MD5: E3811F1A1C5063C941EC0E2766C3EA39
CRC32: AEFD3747
Version: 6.0.20.6
Note that they seem to be almost identical, except for the code inside {} and the "info source" information which is "Patrick M. Kolla" in the first one and is absent in the last 2, but change afterwards to "Safer Networking Ltd." when their classification shifts to "legitimate" after reopening Spybot-S&D.
I appreciate your attention.
Question 1. The Spybot tool "ActiveX" show me 3 ActiveX applications with the same name and MD5 installed in my system. When opening Spybot for the first time, only one of them is classified as legitimate, but opening Spybot a second time, all 3 are then classified by the program as legitimate (which i think kind of strange). I don't know if i should try to uninstall the ones that are redundant, or if they pose some kind of threat or could cause instability to my browser. I copied the following from "SpybotSD.ActiveX report.txt" created by me when running Spybot the first time after reinstalling it:
{8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_02
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
description: Sun Java
classification: Legitimate
known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
info link:
info source: Patrick M. Kolla
Path: C:\Programas\Java\jre1.6.0_02\bin\
Long name: npjpi160_02.dll
Short name: NPJPI1~1.DLL
Date (created): 12-07-2007 2:22:38
Date (last access): 27-09-2007 8:50:00
Date (last write): 12-07-2007 4:00:36
Filesize: 132496
Attributes: archive
MD5: E3811F1A1C5063C941EC0E2766C3EA39
CRC32: AEFD3747
Version: 6.0.20.6
{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_02
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
Path: C:\Programas\Java\jre1.6.0_02\bin\
Long name: npjpi160_02.dll
Short name: NPJPI1~1.DLL
Date (created): 12-07-2007 2:22:38
Date (last access): 27-09-2007 8:50:00
Date (last write): 12-07-2007 4:00:36
Filesize: 132496
Attributes: archive
MD5: E3811F1A1C5063C941EC0E2766C3EA39
CRC32: AEFD3747
Version: 6.0.20.6
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_02
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
Path: C:\Programas\Java\jre1.6.0_02\bin\
Long name: npjpi160_02.dll
Short name: NPJPI1~1.DLL
Date (created): 12-07-2007 2:22:38
Date (last access): 27-09-2007 8:50:00
Date (last write): 12-07-2007 4:00:36
Filesize: 132496
Attributes: archive
MD5: E3811F1A1C5063C941EC0E2766C3EA39
CRC32: AEFD3747
Version: 6.0.20.6
Note that they seem to be almost identical, except for the code inside {} and the "info source" information which is "Patrick M. Kolla" in the first one and is absent in the last 2, but change afterwards to "Safer Networking Ltd." when their classification shifts to "legitimate" after reopening Spybot-S&D.
I appreciate your attention.