Possible False Positive - TrojanC-05

Spybot has detected TrojanC-05 in the following log http://forums.spybot.info/showthread.php?t=65484

I closed the log as I could not find any malware on the machine. Since then the user PM'd me stating that Spybot detected the trojan again in HKEY_LOCAL_MACHINE\SOFTWARE\Interface\{FC856072-9CC4-4833-8EBA-F62224A62A59}

Is it possible that this is a false positive?

Thanks,

diver79.

Hello,

I searched our detection database for "{FC856072-9CC4-4833-8EBA-F62224A62A59}" but did not find anything related to it.

The key you posted is actually not the usual key for an interface id, but I added this one and the id to the regular interface position in the registry and did a scan with Spybot S&D which came up with no result.

If you still have the log file somewhere it would help in finding this possible false positive.

Hi Yodama,

Apologies for the delay in getting back to you. I asked my user to supply the log but they have opted to R&R the machine.

Thanks for looking into it though.

diver79.

thanks for your feedback