delzip179.dll

[cottcin]

I have another anti-spyware program installed in addition to Spybot Search and Destroy. It has detected the delzip179.dll file as a potential piece of spyware and labeled it Spyware.Borzoi

Does this make any sense? From what I can tell, this is probably a file that is normally supposed to be part of Spybot Search and Destroy. Could the file have become corrupted? Is there any way I can double-check this? Or, is this perhaps a known issue where this file is sometimes mis-labeled as being spyware?

Thanks!

Cindy

[Terminator]

Other people are having a similar problem so see HERE (http://forums.spybot.info/showthread.php?t=24142) for more info.

PS: Buy any chance are you running AVG 8.0? I ask because that program has major compatibility problems with Spybot 1.5.2.20

[md usa spybot fan]

Cottcin (Cindy):

Just to add some questions/information to Terminator (http://forums.spybot.info/member.php?u=12307)'s post.

Questions:
Is the DelZip179.dll file being detected in the following Directory?
C:\Program Files\Spybot - Search & Destroy
What version of Spybot - Search & Destroy are you running (Spybot » Help » About)?
__________

Assuming you are running Spybot 1.2.5.20: While in Windows explorer, if you right click on the DelZip179.dll and select Properties:
In the General tab does it show?
Location: C:\Program Files\Spybot - Search & Destroy\
Size: 246 kb (252320 bytes)
Created: Thursday, January 31, 2008, 7:35:39 AM
In the Version tab does it show?
File version: 1.79.7.4
Description: Freeware Zip/Unzip
Copyright: Copyright © 2007, Russell Peters

If the file has those attributes it is most likely a legitimate file.

There are other attributes that Explorer » Properties does not show. Those attributes are the hash values of the files. The various hash values of the DelZip179.dll, Version 1.79.7.4 are:
CRC-32: 6421DCC7
MD5: DF7A1752B2107FE5218290368760E316
SHA1: 453F386AC46E957172E86D0569229C8EDF572AA2
If you fee that the DelZip179.dll that you have is the legitimate file delivered with Spybot 1.2.5.20, then please report the file as a probable false positive to the producer of the software that detected it.

ps: What is the other software you are running and does it retain a log file that you can post?

[cottcin]

Terminator, I do run AVG, but that is not the program that is reporting the problem. I am also running Spyware Detector, which is the software reporting the problem.

Interestingly enough, Spybot Search and Destroy doesn't like Spyware Detector. In fact, the only spyware that Spybot S & D has ever detected for me is Spyware Detector, itself.

I know that Spyware Detector has a bad reputation but it seems to have improved its act and has been working well for me for quite a while.

MD USA Spybot Fan:


Yes, the file is located in C:\Program Files\Spybot - Search & Destroy
Yes, I am using version 1.5.2.20.


The location and size are correct, but it was created on Sunday, November 11, 2007, 8:44:17 PM and modified on Saturday, November 17, 2007, 7:31:58 PM.

The attributes showing in the version tab match those you described.

So, do you think it's just a false report? Is there any way I can look at the hash value attributes or is this unnecessary in your opinion?

Thanks for taking the time to answer. It's much appreciated. :-)

[md usa spybot fan]

cottcin:


... but it was created on Sunday, November 11, 2007, 8:44:17 PM and modified on Saturday, November 17, 2007, 7:31:58 PM. ...
You are correct, I copied the wrong date & time. I should have said:
Modified: Saturday, November 17, 2007 7:31:58 PM
Correct program - false positive.

[cottcin]

Thanks for your help. Greatly appreciated! :-)