View Full Version : ewido anti-spyware 4.0.0.172 false positive
NumberSix
2006-06-20, 20:21
I just upgraded my (beta) ewido anti-spyware 4.0 today, and got the following problem when I ran a Spybot scan:
Central24:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ewidoantispyware4
ewido isn't a Spanish dialer. :)
md usa spybot fan
2006-06-20, 20:47
There appears to be a similar report in the German forum (Spybot-S&D in deutsch (http://forums.spybot.info/forumdisplay.php?f=15)) here:
fehlalarm -Central24 (http://forums.spybot.info/showthread.php?t=5289) (false alarm -Central24)
OldRebel
2006-06-21, 00:01
I have that false positive related to Ewido also:
Central24: Uninstall settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ewidoantispyware4
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
When will this be fixed?:confused:
Hello.
I will bring this topic to Teams attention.
greenhatch
2006-06-21, 09:22
Any further information yet please Admin?
Central24:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ewidoantispyware4
ewido isn't a Spanish dialer.
Of course not. Looks like they made an update causing Spybot to falsely detect this key. We did not make any changes on this detection rule in the last updates.
When will this be fixed?
This fp will be fixed in the next detection, which probably will be released on friday.
tetonbob
2006-06-22, 23:13
Thanks, Buster.
Hardhead
2006-06-24, 18:49
Just a headsup.
The false positive is still showing with the lastest update here (http://spybot.info/en/updatehistory/index.html).
OldRebel
2006-06-25, 02:49
I just installed Ewido and Spybot on a newly restored PC today, so I have the very newest version and signatures. When I ran a scan with Spybot, it did not detect the issue with Ewido again. When I scanned 2 days ago before the PC was restored, it did detect it. Either the Spybot signatures have been corrected, or the newest release of Ewido does not have the detected file.
Hardhead
2006-06-25, 16:08
Pardon me,
I stand to be corrected. I had done a Image restore before the new definitions came out. :blush:
My mistake. Everything is fine.:bigthumb: