PDA

View Full Version : Maybe a false positive



DooGie
2006-05-27, 23:29
After the last Spybot update I get this entry.
Prorat: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{AAA288BA-9A4C-45B0-95D7-94D524869DB5}

I've scanned again with Ad-Aware, Ewido, Microsoft Defender, NAV2005, nod32 and Avast. They all find nothing. I've also checked manually for evidence of Prorat but found nothing.

tashi
2006-05-27, 23:41
Hello.

http://castlecops.com/o21list-49.html
CLSID {AAA288BA-9A4C-45B0-95D7-94D524869DB5}
Name WPDShServiceObj
Path/File WPDShServiceObj.dll
Status L
Description Windows Portable Device Shell Service Object

Thank you for reporting, I will bring to Teams attention. :)

DooGie
2006-05-28, 04:05
Thanks for the fast reply :)

Buster
2006-05-29, 12:19
Hello DooGie,

we removed this false positive from our detection. This false positive was caused by a rule in the beta.sbi. The beta.sbi is designed to get false positives fixed before they will get into the main update. Thank you very much for reporting! A fixed detection file will be released on friday.