VibrationalMode
2009-08-02, 02:14
Hello.
I recently have been going through the motions of a few infection scares (likely hoaxes / false positives). I believe that the file ENLOCSTR.EXE is being incorrectly identified by SpyBot as a Smitfraud-C variant.
I am currently running SpyBot 1.6.2 on Windows XP SP3, patched up to recent versions on all. I'm also running Nod32 and MalwareBytes AntiMalware, neither of which see this file as being infected. Spybot does not see this file as infected during a normal scan. Only during a right-click context-menu scan does it come up with an infected result, and also comes up with nothing on hurestics. Virus Total (report here (http://www.virustotal.com/analisis/13639862ea23b4350cff11b38d963efdaa6f2b209dd86ed21b7203eb0868e1e5-1249169160)) comes up with only 1/41 as a result.
I will send a compressed, password protected sample to the email address stickied at the top of the forum. I will provide any more information required, as well. Thank you!
I recently have been going through the motions of a few infection scares (likely hoaxes / false positives). I believe that the file ENLOCSTR.EXE is being incorrectly identified by SpyBot as a Smitfraud-C variant.
I am currently running SpyBot 1.6.2 on Windows XP SP3, patched up to recent versions on all. I'm also running Nod32 and MalwareBytes AntiMalware, neither of which see this file as being infected. Spybot does not see this file as infected during a normal scan. Only during a right-click context-menu scan does it come up with an infected result, and also comes up with nothing on hurestics. Virus Total (report here (http://www.virustotal.com/analisis/13639862ea23b4350cff11b38d963efdaa6f2b209dd86ed21b7203eb0868e1e5-1249169160)) comes up with only 1/41 as a result.
I will send a compressed, password protected sample to the email address stickied at the top of the forum. I will provide any more information required, as well. Thank you!