possible FP: libeay32.dllflagged as Win32.Delfzq

[Rosenfeld]

Soybot 1.5.2.2, latest beta.sbi included:

Spybot flags as Win32.Delf.zq the file libeay.dll in my system32 folder.

According to http://www.processlibrary.com/directory/files/libeay32/21558
that file is commonly used in open source software and is not spyware/malware.NAV has no problems with it.

I think this is an FP.

Win32.Delf.zq: [SBI $9CE4E1B2] Library (File, nothing done)
C:\WINDOWS\system32\libeay32.dll

--- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---

2008-01-28 blindman.exe (1.0.0.7)
2008-01-28 SDDelFile.exe (1.0.2.4)
2008-01-28 SDMain.exe (1.0.0.5)
2007-10-07 SDShred.exe (1.0.1.2)
2008-01-28 SDUpdate.exe (1.0.8.8)
2008-01-28 SDWinSec.exe (1.0.0.11)
2008-01-28 SpybotSD.exe (1.5.2.20)
2008-01-28 TeaTimer.exe (1.5.2.16)
2008-01-31 unins000.exe (51.49.0.0)
2008-01-28 Update.exe (1.4.0.6)
2008-01-28 advcheck.dll (1.5.4.5)
2007-04-02 aports.dll (2.1.0.0)
2007-11-17 DelZip179.dll (1.79.7.4)
2008-01-28 SDFiles.dll (1.5.1.19)
2008-01-28 SDHelper.dll (1.5.0.11)
2008-01-28 Tools.dll (2.1.3.3)
2008-01-30 Includes\Beta.sbi (*)
2007-11-06 Includes\Beta.uti (*)
2008-01-30 Includes\Cookies.sbi (*)
2007-12-26 Includes\Dialer.sbi (*)
2008-01-30 Includes\DialerC.sbi (*)
2008-01-30 Includes\HeavyDuty.sbi (*)
2007-12-26 Includes\Hijackers.sbi (*)
2008-01-30 Includes\HijackersC.sbi (*)
2007-10-04 Includes\Keyloggers.sbi (*)
2008-01-30 Includes\KeyloggersC.sbi (*)
2008-01-16 Includes\Malware.sbi (*)
2008-01-30 Includes\MalwareC.sbi (*)
2007-10-24 Includes\PUPS.sbi (*)
2008-01-30 Includes\PUPSC.sbi (*)
2008-01-30 Includes\Revision.sbi (*)
2008-01-09 Includes\Security.sbi (*)
2008-01-30 Includes\SecurityC.sbi (*)
2008-01-23 Includes\Spybots.sbi (*)
2008-01-30 Includes\SpybotsC.sbi (*)
2007-11-06 Includes\Tracks.uti
2008-01-16 Includes\Trojans.sbi (*)
2008-01-30 Includes\TrojansC.sbi (*)
2007-12-24 Plugins\TCPIPAddress.dll

[dadkins]

Got this on two computers - seen also in the Deutsch(sp) forums here:
http://forums.spybot.info/showthread.php?t=23525&highlight=libeay32.dll

Translated via Google:
http://64.233.179.104/translate_c?hl=en&u=http://forums.spybot.info/showthread.php%3Ft%3D23525%26highlight%3Dlibeay32.dll

We are not alone!

[tashi]

Thanks, I left a note for our detectives. :)

[Yodama]

thanks for reporting this,
it looks like an Open SSL library got falsely detected here.
Will be corrected with the next update.

[zardoz]

Me to.
And my PC reboot when spybot try to eraas it

[dadkins]

Thank you tashi &Yodama! ;)