OpenCandy false positives?

Printable View

2013-11-20, 19:09
antdude

OpenCandy false positives?

Hello.

I got the latest updates for my very old Spybot S&D v1.6.2 in updated 64-bit W7 EE SP1 machine. It found some possible infections, but they might be false positives because I have not seen them before since I update and scan weekly (usually Wednesdays):
--- Search result list ---
OpenCandy: [SBI $5B3C20C2] Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{1A720F5A-8FE4-4A0F-9B3A-494BF58B0813}

OpenCandy: [SBI $5B3C20C2] Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{1A720F5A-8FE4-4A0F-9B3A-494BF58B0813}

Is anyone else seeing this too with today's updates?

Thank you in advance. :)
2013-11-21, 08:55
(m/f)

These detections have been added by the last update.
2013-11-21, 14:50
antdude

Quote:

Originally Posted by (m/f)

These detections have been added by the last update.

So, these aren't FPs? Hmm, I wonder what program(s) are using OpenCandy. I looked at the registry and can't figure it out. Is there a way to know?
2013-11-22, 09:01
(m/f)

OpenCandy is used in bundles with legit software as "optional component", so you have to actively deny it from being installed along the software you wanted to install.
2013-11-22, 09:20
antdude

Quote:

Originally Posted by (m/f)

OpenCandy is used in bundles with legit software as "optional component", so you have to actively deny it from being installed along the software you wanted to install.

Yeah, I have to figure out where it is and where it came from. I can't remember what was installed with it.