PDA

View Full Version : Fixed: 1.5.2.20 Detects SimpPro as NiceSpy.Keylogger



safecoder
2008-02-27, 19:25
We use SimpPro for MSN encryption. This is well known and respected product. The latest version of Spybot is showing this product as NiceSpy.XPKeylogger. All of the registry entries take you to Setup folder for SimpPro. I assume this is a false positive since this is a known product. Can you confirm? Should we be concerned?

Windows XP Professional SP2
Internet Explorer 7, FireFox 2.x
Version of Spybot S&D: 1.5.2.20 updated 02/2782008

Detected in standard scan for problems:


--- Search result list ---
NiceSpy.XPKeylogger: [SBI $735EC972] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{08B9999C-DAD2-4353-B25B-8CCAFFCA4D16}

NiceSpy.XPKeylogger: [SBI $4B06E03D] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{23E86816-772B-4B28-A924-A135CFF6469A}

NiceSpy.XPKeylogger: [SBI $176BC7C0] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{41DBA1FA-44F6-4BD5-82DF-1A7FDEA0475D}

NiceSpy.XPKeylogger: [SBI $97D5A818] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{E05AEA1E-BCB1-473A-8B2A-4829D9E1AD23}

Microsoft.WindowsSecurityCenter.AntiVirusOverride: [SBI $3604910C] Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride

Thanks,
D

Yodama
2008-02-28, 07:28
hello,

I can confirm that this is a false positive. It has been fixed with the update dated 2008-02-27 within the keyloggers.sbi.
Please make sure that you have this update and rescan.