PDA

View Full Version : Need User Feedback: Netmeter false positive ?



webwizard
2009-10-15, 20:25
Operating System: Win XP SP3
Browser and Version: IE8.0.6001
Spybot S&D: 1.6.2.46 - Last update: 14/10/09
where did the false positive occur:
System startup program list.

Actually, there are two netmeter.exe. One comes from Hoo technologies, the other is an open source program from MetalMachine. The latest version of the first one is v3.6 build 437, the latest of the second is 1.1.4 beta. Since the second one is:

- Open source (sources in Delphi available at the site)
- Guaranteed 100% clean by Softpedia (http://www.softpedia.com/progClean/NetMeter-Clean-23932.html)

it's hard to believe that contains some sort of spyware (namely Netratings Premeter).

Moreover, navigating with IE8 doesn't trigger any TCP/IP communication (or at least the COMODO log don't track any).

Is it possible that the MetalMachine Netmeter is detected (wrongly) for the HooTech Netmeter ?

Thanks

Paul

Yodama
2009-10-19, 08:08
hello,

for the system startup list Spybot S&D 1.6.2 acutally uses an outdated version of Paul Collins startup list from sysinfo.org.
This however does not effect the scanning of Spybot S&D, it will not detect and remove the HooTech Netmeter. Currently this is "only" displaying the info in the startup list.
I will check what can be done about updating the startup list within Spybot S&D.