PDA

View Full Version : Need User Feedback: WebSpyShield false positive with the latest update?



darvo
2007-11-28, 16:11
spybot found this dangerous key

WebSpyShield
HKEY_USERS\..\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2F12EBBC-8CF2-464E-9F13-CB58705D4824}

is it a false positive?

darvo
2007-11-28, 16:27
It should be the immunization key added by spybot, but now spybot detects it as spyware.

Yodama
2007-11-29, 07:18
hello,

who told you that it is part of the Immunization? It is not.
It is actually a usage track that is associated with a Guid which in turn references a file.
Since this is found alone without other components of WebSpyShield it is most likely a false positve. To be sure that it is a false positive and not a new infection that is only partly detected please follow the steps in the sticky (http://forums.spybot.info/showthread.php?t=19117)

darvo
2007-11-29, 11:07
It is actually a usage track that is associated with a Guid which in turn references a file.
Since this is found alone without other components of WebSpyShield it is most likely a false positve.

yes, it's a false positive because I only have 1 key in the report.
I learned "...\Ext\Stats\" means statistics. Thank you

Yodama
2007-11-29, 12:45
To be sure that it is a false positive and not a new infection that is only partly detected please follow the steps in the sticky (http://forums.spybot.info/showthread.php?t=19117)

have you also considered this?