Zhelatin

[Benzmum]

Spybot has just found Win32.Zhelatin.k on my computer. I have my browsers set to protect me from unwanted cookies and downloads, so why would I get this? Can you help?

[Zenobia]

It might be helpful if you showed the short log,so that someone could have a look at it.
Produce a short log (showing items flagged)

1. Open SpyBot.
2. Check for problems.
3. When finished, right click and choose copy results (not the full report) to clipboard and post that into topic.

[Benzmum]

I've since found a couple of holes in my browser privacy which I've now patched up. I ran Spybot again, and this time the trojan didn't come up - I had done the "fix" when it first appeared. So if this happens again I'll try collecting the results as you suggested, Zenobia. Thanks!

P.S. Is there something significant about "Produce a short log (showing items flagged)?" Should I find that somewhere when I get notification of a possible threat?

[Zenobia]

That was so that what Spybot was finding could be posted on here,so it could be seen on this forum.It's basically what you see after a scan if you click the + signs,in text form.It's sometimes helpful to see.In your case,where you seemed surprised that Spybot detected something,I wanted to see if I could find out if it might be a false positive or something.

This is Sophos description of W32/Dref-Y,aka Email-Worm.Win32.Zhelatin.k.
http://www.sophos.com/security/analyses/w32drefy.html

How is your computer,since Spybot fixed it?Everything seem okay?Was your computer acting funny before Spybot detected that?

[Benzmum]

Hi Zenobia. My computer's been behaving fine lately, thanks. (The last time it was acting up I was using a spyware/antivirus package that was constantly running around my computer and slowing things down enormously. That was Shaw Secure, a derivative I gather of FSecure. I removed it and everything speeded up enormously.)

I was reading today that Windows Defender is supposed to "protect" against spyware. In fact, I do a Windows Defender scan once a week and it never finds ANYTHING; whereas AdAware, Spybot & AVG do find things on occasion. I really wonder if Windows Defender does anything at all.

I'll keep notes on what you've said for next time Spybot detects something, and I'll see what comes up then. Thanks again for your help.

[Zenobia]

Okay,that's good to hear.I thought I'd fish around a little and see how things were with your computer,where the description of Zhelatin.k says it drops more malware.

I see your title says "False Positive?",so in case you're unsure what that term means,I thought I'd put this link on for you.It can also apply to an antispyware app:
http://www.viruslist.com/en/glossary?glossid=153654932