Results 1 to 4 of 4

Thread: Maybe a false positive

  1. #1
    Junior Member
    Join Date
    May 2006
    Posts
    2

    Default Maybe a false positive

    After the last Spybot update I get this entry.
    Prorat: Class ID (Registry key, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{AAA288BA-9A4C-45B0-95D7-94D524869DB5}

    I've scanned again with Ad-Aware, Ewido, Microsoft Defender, NAV2005, nod32 and Avast. They all find nothing. I've also checked manually for evidence of Prorat but found nothing.

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,693

    Default

    Hello.

    http://castlecops.com/o21list-49.html
    CLSID {AAA288BA-9A4C-45B0-95D7-94D524869DB5}
    Name WPDShServiceObj
    Path/File WPDShServiceObj.dll
    Status L
    Description Windows Portable Device Shell Service Object

    Thank you for reporting, I will bring to Teams attention.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Junior Member
    Join Date
    May 2006
    Posts
    2

    Default

    Thanks for the fast reply

  4. #4
    Member of Team Spybot Buster's Avatar
    Join Date
    Oct 2005
    Location
    Bochum/Germany
    Posts
    389

    Default

    Hello DooGie,

    we removed this false positive from our detection. This false positive was caused by a rule in the beta.sbi. The beta.sbi is designed to get false positives fixed before they will get into the main update. Thank you very much for reporting! A fixed detection file will be released on friday.
    "The advantage of wisdom is that you can always act the fool. The opposite is quite tough."

    K. Tucholsky

    _______________________________________________________________

    Please help us improve Spybot and download our distributed testing client.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •