PDA

View Full Version : false zlob.downloader



pgroot
2006-06-24, 22:47
Spybot 1.3 2006-06-23 on Windows ME reports Zlob.Downloader
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current\Run\ICSDCLT
whose Data is
C:\WINDOWS\rundll32.exe C:\WINDOWS\SYSTEM\icsdclt.dll,ICSClient
the MD5 is for rundll32.exe

ICSDCLT is for Internet Connection Sharing. See
http://www.tasklist.org/task_rundll32_exeIcsdclt_dll_ICSClient_1379.html

md usa spybot fan
2006-06-24, 23:17
THis may/may not be a false positive, however:


Spybot 1.3 2006-06-23 on Windows ME ...
Please go into Spybot > Help > About. If you are actually running "Spybot - Search & Destroy 1.3" as you indicated and since you are not running on a Windows 95 system, I suggest you consider upgrading to Spybot 1.4.

There are four (4) download sites for Spybot-S&D 1.4 here:
Mirror Selection – The home of Spybot–S&D!
http://www.safer-networking.org/en/mirrors/index.html

To uninstall Spybot-S&D 1.3 see: FAQ - Frequently Asked Questions
How to uninstall?
http://www.safer-networking.org/en/faq/27.html