rubybear
2009-02-05, 08:10
I just updated Spybot with your 2/4/09 update. When I ran an Ad-Aware scan, it detected 6 objects from Spybot that were all classified as Trojans. Here is the log file from Ad-Adware:
ArchiveData(Spybot trojans.bckp)
Referencefile : SE1R333 04.02.2009
======================================================
WIN32.TROJAN.SPY
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[0]=Process : C:\PROGRA~1\SPYBOT~1\SDHelper.dll
obj[1]=Regkey : CLSID\{53707962-6F74-2D53-2644-206D7942484F}
obj[2]=File : c:\progra~1\spybot~1\sdhelper.dll
obj[3]=Regkey : SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}
obj[4]=File : C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
obj[5]=File : C:\Program Files\Spybot - Search & Destroy\UMTWHERDQN.scr
I quarantined these objects, which I would do with any Trojan detected with Ad-Aware. (I use Ad-Aware SE)
Are these objects really Trojans? Should I restore them from quarantine? If I did, won't Ad-Aware just keep thinking they are Trojans and alert me each time I run a scan?
ArchiveData(Spybot trojans.bckp)
Referencefile : SE1R333 04.02.2009
======================================================
WIN32.TROJAN.SPY
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[0]=Process : C:\PROGRA~1\SPYBOT~1\SDHelper.dll
obj[1]=Regkey : CLSID\{53707962-6F74-2D53-2644-206D7942484F}
obj[2]=File : c:\progra~1\spybot~1\sdhelper.dll
obj[3]=Regkey : SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}
obj[4]=File : C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
obj[5]=File : C:\Program Files\Spybot - Search & Destroy\UMTWHERDQN.scr
I quarantined these objects, which I would do with any Trojan detected with Ad-Aware. (I use Ad-Aware SE)
Are these objects really Trojans? Should I restore them from quarantine? If I did, won't Ad-Aware just keep thinking they are Trojans and alert me each time I run a scan?