PDA

View Full Version : Need User Feedback: regsvr32.exe and rundll32.exe f.p.?



steve pas
2009-07-10, 11:31
Possible FP,
Setup - XP Pro sp2, firefox 3.0.11, spybot 1.6.2.0/1.6.6.32 (8 July definitions)

Right click scan of the following located in windows\system32
regsvr32.exe = Ad Destination
rundll32.exe = win32.Delf.Rtk
both of these were flagged by heuristics part of scan only.

Virustotal, mbam and trojan hunter shows all clear on these two files.

I've used spybot for apprx 4yrs and has been very good on my system,
a big thanks to all involved with spybot.

Yodama
2009-07-13, 10:55
hello,

this could be false positives of the heuristics part of the single file scanner.
Please email the 2 files to detections@spybot.info for analysis with a reference to this thread.

steve pas
2009-07-13, 14:42
Greetings,
Files uploaded,
good luck
steve

Yodama
2009-07-14, 07:52
Thank you for sending in the requested files.
I can confirm that these are false positives with the heuristics part of the single file scanner. A fix will be released with the next detection update scheduled for Wednesday 2009-07-15.

steve pas
2009-07-14, 11:09
Nice work on swift resolution.
Best regards steve.