turtle
2006-11-07, 18:54
I am new to this forum, but have been using spybot for years.
I’d appreciate if somebody could tell me if what I am seeing is a false positive (it seems to me like I is). Below pls. see in chronological order what I did and what I have seen:
It all happened last Saturday. I am using SpyBot & SpywareBlaster on the machine in question. Here is what I did:
1. Created a Ghost backup (thanks goodness for that!)
2. Updated SpywareBlaster definitions and enabled “all protection”
3. Updated SpyBot definitions and ran a check.
4. SpyBot reports: “Smitfraud-C.Toolbar888” (the key is: “…..\Sebring”)
Now it gets nasty. Spybot is unable to remove it. As paranoid as I am, I am searching the net for info, and download and install trial versions of half a dozen spyware programs that are supposed to detect Smitfraud. None of them reports or finds it.
So I want to get rid of these installed programs. Here are my next steps:
5. I recover from the Ghost image that I had just created a few hours ago.
6. Updated SpyBot definitions and ran a check again without updating SpywareBlaster.
7. Spybot reports that no problems were found.
8. Now I updated SpywareBlaster definitions and enabled “all protection” again.
9. Ran SpyBot check again.
10. Now it again reports Smitfraud.
So it looks like that either SpywareBlaster has installed Smitfraud (I think that’s unlikely) or there is a conflict here between SpywareBlaster and Spybot that makes Spybot report a false positive.
Any input would be appreciated!
Thanks,
Turtle.
I’d appreciate if somebody could tell me if what I am seeing is a false positive (it seems to me like I is). Below pls. see in chronological order what I did and what I have seen:
It all happened last Saturday. I am using SpyBot & SpywareBlaster on the machine in question. Here is what I did:
1. Created a Ghost backup (thanks goodness for that!)
2. Updated SpywareBlaster definitions and enabled “all protection”
3. Updated SpyBot definitions and ran a check.
4. SpyBot reports: “Smitfraud-C.Toolbar888” (the key is: “…..\Sebring”)
Now it gets nasty. Spybot is unable to remove it. As paranoid as I am, I am searching the net for info, and download and install trial versions of half a dozen spyware programs that are supposed to detect Smitfraud. None of them reports or finds it.
So I want to get rid of these installed programs. Here are my next steps:
5. I recover from the Ghost image that I had just created a few hours ago.
6. Updated SpyBot definitions and ran a check again without updating SpywareBlaster.
7. Spybot reports that no problems were found.
8. Now I updated SpywareBlaster definitions and enabled “all protection” again.
9. Ran SpyBot check again.
10. Now it again reports Smitfraud.
So it looks like that either SpywareBlaster has installed Smitfraud (I think that’s unlikely) or there is a conflict here between SpywareBlaster and Spybot that makes Spybot report a false positive.
Any input would be appreciated!
Thanks,
Turtle.