Results 1 to 2 of 2

Thread: runasadmin shim confused with Nurech?

  1. #1
    Junior Member
    Join Date
    Feb 2007

    Default runasadmin shim confused with Nurech?

    I think that SpyBot has confused the SHIM "runasadmin" with a Nurech trojan/ downloader. It is flagging something wrong with a registry entry in ...\winlogon\shell not being explorer.exe, which of course it will not be using this security software.

    I am happy with being flagged for such a major change, but not so much with this simple identification.

    Windows Defender does not appear to find anything, which is rather surprising.

    Or have I got the wrong end of the stick?



  2. #2
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005



    yes it is a false positive, we had no intention of flagging changes made by "runasadmin".

    this will be fixed with the next update expected for the middle of next week.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts