Page 2 of 2 FirstFirst 12
Results 11 to 16 of 16

Thread: unvise32.exe Spybot-S&D 1.5.1

  1. #11
    Junior Member
    Join Date
    Sep 2007
    Posts
    2

    Default

    Could I get a quick verification of this being a false positive too? It's kinda freaking me out...

    Here are my scan results:

    ------------------------------------------------

    SpyAgent: [SBI $CB6A2BAE] Executable (File, nothing done)
    C:\WINDOWS\unvise32.exe


    --- Spybot - Search & Destroy version: 1.5 (build: 20070830) ---

    2007-08-31 blindman.exe (1.0.0.6)
    2007-08-31 SDMain.exe (1.0.0.4)
    2007-08-31 SDUpdate.exe (1.0.6.4)
    2007-08-31 SDWinSec.exe (1.0.0.8)
    2007-08-31 SpybotSD.exe (1.5.1.15)
    2007-08-31 TeaTimer.exe (1.5.0.9)
    2007-09-28 unins000.exe (51.46.0.0)
    2007-08-31 Update.exe (1.4.0.5)
    2007-08-31 advcheck.dll (1.5.3.0)
    2007-04-02 aports.dll (2.1.0.0)
    2007-04-02 DelZip179.dll (1.79.5.3)
    2007-08-31 SDHelper.dll (1.5.0.8)
    2007-08-31 Tools.dll (2.1.2.0)
    2007-09-26 Includes\Cookies.sbi (*)
    2007-07-25 Includes\Dialer.sbi (*)
    2007-09-26 Includes\DialerC.sbi (*)
    2007-08-29 Includes\Hijackers.sbi (*)
    2007-09-26 Includes\HijackersC.sbi (*)
    2007-07-25 Includes\Keyloggers.sbi (*)
    2007-09-26 Includes\KeyloggersC.sbi (*)
    2004-11-29 Includes\LSP.sbi (*)
    2007-09-12 Includes\Malware.sbi (*)
    2007-09-26 Includes\MalwareC.sbi (*)
    2007-09-05 Includes\PUPS.sbi (*)
    2007-09-26 Includes\PUPSC.sbi (*)
    2007-09-26 Includes\Revision.sbi (*)
    2007-05-30 Includes\Security.sbi (*)
    2007-09-26 Includes\SecurityC.sbi (*)
    2007-09-12 Includes\Spybots.sbi (*)
    2007-09-26 Includes\SpybotsC.sbi (*)
    2007-08-21 Includes\Tracks.uti
    2007-09-12 Includes\Trojans.sbi (*)
    2007-09-26 Includes\TrojansC.sbi (*)
    2008-12-24 Plugins\TCPIPAddress.dll

    --------------------------------------------------
    When I look at the file properties I get this under the copyright:

    Copyright © MindVision Software 1995-2003

    And it seems to have been created on March 31, 2007... I have no idea how that would have gotten there or what that might have been associated with...

    Any help you can give would be greatly appreciated.

  2. #12
    Member of Team Spybot Buster's Avatar
    Join Date
    Oct 2005
    Location
    Bochum/Germany
    Posts
    389

    Default

    Yes it is a false positive.
    "The advantage of wisdom is that you can always act the fool. The opposite is quite tough."

    K. Tucholsky

    _______________________________________________________________

    Please help us improve Spybot and download our distributed testing client.

  3. #13
    Junior Member
    Join Date
    Jun 2006
    Posts
    12

    Default

    How do i access the log? I already performed the removal but I am extremely worried (paranoid?) because i do all my banking and stuff on my computer and when i look up the file properties it said it was there since 2003!!!!! Does it mean I have had my ID stolen all these years? Please help?

  4. #14
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,491

    Default

    Hello.
    Quote Originally Posted by bud001 View Post
    Does it mean I have had my ID stolen all these years? Please help?
    Buster confirmed that the particular detection reported here by members in this thread, was a false positive, therefore not an actual threat.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  5. #15
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    bud001:

    To make sure that the detection you receive was the same as the other detections that were reported here and have been verified as being false positives, look at the Fixes.yymmdd-hhmm.log file that was produced when you did a "Fix select problems" on the detection.

    By default there are two Checks.yymmdd-hhmm.log files produced during a scan. The second Checks.yymmdd-hhmm.log has the details of what the scan found. Also by default a Fixes.yymmdd-hhmm.log file is produced if you fix or attempt to fix something.

    There are two methods to view logs from previous scans or fixes:
    • Method 1:
      • Go into Spybot > Mode > Advanced mode > Tools > View Reports > View Previous reports. Look for the Checks.yymmdd-hhmm.log or Fixes.yymmdd-hhmm.log file from the previous scan or fix that you are interested in, double click on it (or highlight by clicking on it and then an Open on it).
    • Method 2
      • The Checks.yymmdd-hhmm.log and Fixes.yymmdd-hhmm.log files are stored in the following folders:
        • Windows 95 or 98:
          C:\Windows\Application Data\Spybot - Search & Destroy\Logs
        • Windows ME:
          C:\Windows\All Users\Application Data\Spybot - Search & Destroy\Logs
        • Windows NT, 2000 or XP:
          C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs
        • Windows Vista:
          C:\ProgramData\Spybot - Search & Destroy\Logs
      • Using Windows Explorer, navigate to the correct Checks.yymmdd-hhmm.log or Fixes.yymmdd-hhmm.log file. Double click on it and it should open with Notepad.

    _______________________

    If your detection was the same as the others reported here, then consider restoring the detection the you fix by going into Spybot > Recovery and doing a "Recover selected items" on the object(s) that were removed during the "Fix select problems".

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  6. #16
    Junior Member Crystal Sky's Avatar
    Join Date
    Dec 2005
    Posts
    8

    Default unvise32.exe

    I am running a scan on my desktop and Spybot is detecting C:\Windows\unvise32.exe under the title of:

    RegistryFixIt
    (SBI $4837D47B Executable).
    C:\Windows\unvise32.exe

    Is this still considered an FP?

    Thanks in advance.

    Edit to add: XP - Running the latest update of May 21, 2008; Version 1.5.2.20
    Also running a scan on my laptop (Vista) and it showing up there as well.
    Last edited by Crystal Sky; 2008-05-24 at 16:36. Reason: Adding Version and Updates

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •