PDA

View Full Version : False Positive



UnknownFate
2006-11-15, 17:34
Mind checking the log possible F/P for searchclickads trojan.

LonnyRJones
2006-11-15, 20:03
Hi

Why are you still running 1.3 and why do you think its a false possitive ?

"--- Spybot - Search && Destroy version: 1.3 ---"

UnknownFate
2006-11-15, 20:23
Old backup

The trojan isn`t detected by any other anti spyware/virus program.
Not the first F/P i`ve posted about either.

md usa spybot fan
2006-11-15, 21:15
UnknownFate:


The trojan isn`t detected by any other anti spyware/virus program.
re: The following detection:


SearchClickAds: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{6C51F7E9-8542-4F25-A30F-2060157752E1}
That registry entry is listed, among others, in the following eTrust Spyware Encyclopedia article:
Scaggy (Author: SearchClickAds)
http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453098287
In addition Computer Associates categorizes it as Adware not a Trojan.

UnknownFate
2006-11-15, 21:22
Spybot has it classified as a Trojan.

tashi
2006-11-15, 21:59
Hi

Why are you still running 1.3 and why do you think its a false possitive ?

"--- Spybot - Search && Destroy version: 1.3 ---"


Old backup

The trojan isn`t detected by any other anti spyware/virus program.
Not the first F/P i`ve posted about either.

Yes and you were answered here:
http://forums.spybot.info/showthread.php?t=8431
Thank you for reporting.

Perhaps I am mis-understanding, you are now posting a possible F/P from an old backup running Spybot-S&D version 1.3?

UnknownFate
2006-11-15, 22:14
Got the same results using S&D 1.4.

Webroot doesn`t detect anything, so I don`t think it`s the Scaggy spybot

MisterW
2006-11-16, 15:50
We checked our detection and can NOT confirm the FP. The detected interface belongs to SearchClickAds.
SearchClickAds adds itself as browser helper objekt (BHO) to the Internet Explorer to start automatically if the IE is started. It connects to the internet in background, installs itself without user consent and causes popups and error messages.
May be installed by other trojan horses.

best regards
Markus

UnknownFate
2006-11-16, 21:58
Ran a scan having nothing but Mcafee Internet Security Suite 2007 and Spybot installed. SearchClickAds trojan detected. After uninstalling Mcafee spyware was no longer detected. Seems to be a F/P on one of the Mcafee components again.

MisterW
2006-11-17, 10:21
I can confirm that there is a false positive with McAfee Internet Security Suite 2007. :oops:
Sorry for the confusion but we did not see that the problem is in combination with McAfee. :spider:

the fp will be fixed with the next update , which is expected for today.

Thanks for reporting