SpyFerret

[Nick-YF19]

I was answering a question at Tom Coyote from someone asking about SpyFerret. I rembered that it was on the Rogue Antispyware (http://www.spywarewarrior.com/rogue_anti-spyware.htm) page and was not a program to recommend. I didn't know it was using info taken from Spybot as indiated by this pag (http://www.safer-networking.org/en/compatibility/spyferret.html)e. I did some tests (http://malwareremoval.com/plog/index.php?op=ViewArticle&articleId=59&blogId=3) with SpyFerret, but was suprised that Spybot didn't detect it. Ad Aware did flag it as bad.

According to the page I linked to here about SpyFerret, it was added to Spybot's detections. I used version 1.4 with up to date definitions. Did it get removed from the detections?

[tashi]

Hi Nick.
It is in the Ignore Products as "OnlinePcFix.SpyFerret"

Not sure why it was not detected during your tests.

[Nick-YF19]

I checked the ignore list and it's not checked. I attached the ignore list from the Spybot I used. I scanned again and got a clean bill of health.

[bitman]

If you go to the following support page, place "OnlinePcFix.SpyFerret" in the Search string box and click Start Search, you'll get several hits.
http://www.spybot.info/en/support/index.html

A couple of these refer to a copyrighted file; "Wsock.dll, which is an exact copy of my file Tools.dll" as evidence.
http://www.safer-networking.org/en/news/2003-07-01.html
http://www.safer-networking.org/en/compatibility/spyferret.html

The newest info from 14 April 2005 indicates that the entire database had been stolen, but no updates to this are visible.
http://www.safer-networking.org/en/news/2005-04-14.html

Could be the old detection was for Wsock.dll and this has either been changed or removed from the newer version?