PDA

View Full Version : Fixed: Possible False Positive



gman121
2008-08-24, 17:44
I believe I have found a false positive with the search results in the main program.

Operating System: Windows Vista Home Premium
Browser: IE7
Spybot Version 1.6
Update: Latest Available
The False Positive is occuring only while runnng the main scan engine. I went to that location on my computer and scanned with Spybot and it came out clean.

Did all kinds of investigations and have not found spylocked.

http://forums.spybot.info/showthread.php?t=32858&highlight=spylocked

Hint of the Day: Click the bar at the right of this to see more information! ()


SpyLocked: [SBI $F6431674] Program directory (Directory, fixing failed)
C:\Program Files\\Quarantine\


--- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-07-07 TeaTimer.exe (1.6.0.20)
2008-02-13 unins000.exe (51.41.0.0)
2008-08-18 unins001.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-07-07 advcheck.dll (1.6.1.12)
2007-04-02 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-07-07 SDHelper.dll (1.6.0.12)
2008-06-19 sqlite3.dll
2008-07-07 Tools.dll (2.1.5.7)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2008-08-05 Includes\Adware.sbi (*)
2008-08-12 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-06-03 Includes\Dialer.sbi (*)
2008-08-05 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-07-30 Includes\Hijackers.sbi (*)
2008-08-12 Includes\HijackersC.sbi (*)
2008-08-05 Includes\Keyloggers.sbi (*)
2008-08-12 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-08-05 Includes\Malware.sbi (*)
2008-08-12 Includes\MalwareC.sbi (*)
2008-08-05 Includes\PUPS.sbi (*)
2008-08-12 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-08-12 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-08-12 Includes\Spyware.sbi (*)
2008-08-12 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-08-05 Includes\Trojans.sbi (*)
2008-08-12 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

Yodama
2008-08-25, 07:35
This appears to be a false positive, since Spylocked does not appear to be involved. But it is quite uncommon for a legit security software to put its quarantine folder directly into the program files folder.
You should determine to which application this folder belongs.

gman121
2008-08-25, 21:59
I looked into what exactly is creating the file C: \ Program Files \ Quarantine and it came out to be Mc Afee Anti Virus. This proves definite spylocked to be a false positive. Will this be updated in the program?

Thanks,

Greg

Yodama
2008-08-26, 07:09
thank you for your feedback, the false positive will be corrected with the update scheduled for Wednesday.