Results 1 to 3 of 3

Thread: RingRing

  1. #1
    Junior Member
    Join Date
    Jul 2007
    Posts
    2

    Default RingRing

    The latest detections of Spybot S&D are detecting a simple (misconfigured) application shortcut as the "RingRing" dialer.

    The detection was on a shortcut called "Studio.lnk" on the Desktop of all users. The shortcut pointed to an executable called "Studio.exe" in a directory that didn't exist (the program was moved). These are few first lines of the scan results:


    Code:
    --- Search result list ---
    RingRing:  Desktop link (File, nothing done)
      C:\Documents and Settings\All Users\Desktop\Studio.lnk
    
    
    --- Spybot - Search & Destroy version: 1.4  (build: 20050523) ---
    
    2005-05-31 blindman.exe (1.0.0.1)
    2005-05-31 SpybotSD.exe (1.4.0.3)
    2005-05-31 TeaTimer.exe (1.4.0.2)
    2007-01-04 unins000.exe (51.41.0.0)
    2005-05-31 Update.exe (1.4.0.0)
    2007-05-23 advcheck.dll (1.5.3.0)
    2005-05-31 aports.dll (2.1.0.0)
    2005-05-31 borlndmm.dll (7.0.4.453)
    2005-05-31 delphimm.dll (7.0.4.453)
    2005-05-31 SDHelper.dll (1.4.0.0)
    2007-01-02 Tools.dll (2.0.1.0)
    2005-05-31 UnzDll.dll (1.73.1.1)
    2005-05-31 ZipDll.dll (1.73.2.0)
    2007-07-18 Includes\Cookies.sbi (*)
    2007-05-30 Includes\Dialer.sbi (*)
    2007-07-18 Includes\DialerC.sbi (*)
    2007-07-11 Includes\Hijackers.sbi (*)
    2007-07-18 Includes\HijackersC.sbi (*)
    2007-07-11 Includes\Keyloggers.sbi (*)
    2007-07-18 Includes\KeyloggersC.sbi (*)
    2007-07-18 Includes\Malware.sbi (*)
    2007-07-18 Includes\MalwareC.sbi (*)
    2007-07-11 Includes\PUPS.sbi (*)
    2007-07-18 Includes\PUPSC.sbi (*)
    2007-07-18 Includes\Revision.sbi (*)
    2007-05-30 Includes\Security.sbi (*)
    2007-07-18 Includes\SecurityC.sbi (*)
    2007-07-11 Includes\Spybots.sbi (*)
    2007-07-18 Includes\SpybotsC.sbi (*)
    2005-02-17 Includes\Tracks.uti
    2007-07-18 Includes\Trojans.sbi (*)
    2007-07-18 Includes\TrojansC.sbi (*)
    2007-06-06 Plugins\TCPIPAddress.dll
    After I corrected the shortcut to point to the correct directory the false detection went away. If I change the shortcut back to a wrong path the detection comes back.

  2. #2
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    thank you for reporting,

    the false positive will be fixed with the upcoming update
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  3. #3
    Junior Member
    Join Date
    Jul 2007
    Posts
    2

    Default Thanks

    Thanks, the newest detections from yesterday (2007-07-25) seem to have fixed it.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •