Ad-Aware detects 6 Trojans from Spybot

[rubybear]

I just updated Spybot with your 2/4/09 update. When I ran an Ad-Aware scan, it detected 6 objects from Spybot that were all classified as Trojans. Here is the log file from Ad-Adware:

ArchiveData(Spybot trojans.bckp)
Referencefile : SE1R333 04.02.2009
======================================================

WIN32.TROJAN.SPY
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[0]=Process : C:\PROGRA~1\SPYBOT~1\SDHelper.dll
obj[1]=Regkey : CLSID\{53707962-6F74-2D53-2644-206D7942484F}
obj[2]=File : c:\progra~1\spybot~1\sdhelper.dll
obj[3]=Regkey : SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}
obj[4]=File : C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
obj[5]=File : C:\Program Files\Spybot - Search & Destroy\UMTWHERDQN.scr

I quarantined these objects, which I would do with any Trojan detected with Ad-Aware. (I use Ad-Aware SE)

Are these objects really Trojans? Should I restore them from quarantine? If I did, won't Ad-Aware just keep thinking they are Trojans and alert me each time I run a scan?

[Matt]

Hi,

as far as I know, theese five points are NOT trojans. ;) It's a false positive from Ad-Aware. :sad: I've already reported this to a member of Team Spybot. There is also a thread in the Ad-Aware support forum.

Best regards,
-Matt-

[spybotsandra]

Hello,

This false positive from AdAware has already been fixed.

Best regards
Sandra
Team Spybot

[AnthonyH]

I'm getting false positives from Ad-Aware on several computers. All my computers have Spybot installed, but Ad-Aware only reports Spybothelper.dll as a problem on some of them.

AdAware log file follows:

Databaseinfo
===========================
Version number: 146
Build Number: 5
Build Date and Time: 2009/02/04 10:50:17

Scan Statistics
===========================
Method: Full
Scan tracking cookies.............................: Off
Scan ADS filestreams..............................: Off

Item Scanned: 448824
Infections Detected: 1
Infections Ignored: 0

Scan detailed statistics
===========================
Type Critical Total
Process Scan....: 0 0
Registry Scan...: 0 0
Registry PE Scan: 0 0
Hosts File Scan.: 0 0
File Scan.......: 0 0
Folder Scan.....: 0 0
LSP Scan........: 0 0
ADS Scan........: 0 0
Cookie Scan.....: 0 0
File Hash Scan..: 1 1

Infections Found
===========================
Family Id: 983 Name: Win32.Trojan.Spy Category: Virus TAI:10
Item Id: 536469 Value: File: C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

[tashi]

Everyone,

Hello,

This false positive from AdAware has already been fixed.

Best regards
Sandra
Team Spybot

Please update your AAW program.

Best regards.

[rubybear]

Thanks for the responses. I was pretty worried yesterday!

According to the Ad-Aware support forums, the latest update (2/4/09) mistakenly detected some of Spybot's files as Trojans.

There is a new update (2/5/09) from Ad-Aware that should fix the problem.