Page 5 of 7 FirstFirst 1234567 LastLast
Results 41 to 50 of 61

Thread: Teatimer 1.6.6.32 False Positives

  1. #41
    Junior Member
    Join Date
    Nov 2009
    Posts
    1

    Default Possible False Possible with Zone Alarm Install

    Hi
    SpyBot Tea Timer reported a problem whilst I was installing Zone Alarm ISS Upgrade V9.1.008.00. Is this a false positive?
    I've not reproduced this occurence as I've not re-installed the ZoneAlarm Upgrade. Details:-

    * Operating System Windows Vista Home Premium SP2
    * Browser FireFox 3.5.4
    * Version of Spybot S&D i.6.2.46
    * Latest updates -
    [teatimer166.zip]
    InstallDate=2009-03-30
    ReleaseDate=2009-03-11
    URL=http://www.spybotupdates.biz/updates/files/teatimer166.zip
    LocalFile=C:\Program Files\Spybot - Search & Destroy\Updates\teatimer166.zip
    UpdateName=TeaTimer update 1.6.6
    Description=!TeaTimer update (1011 KB)

    [advcheck163.zip]
    InstallDate=2009-07-31
    ReleaseDate=2009-07-29
    URL=http://www.spybotupdates.com/updates/files/advcheck163.zip
    LocalFile=C:\Program Files\Spybot - Search & Destroy\Updates\advcheck163.zip
    UpdateName=Advanced detection library 1.6.3
    Description=!Advanced detection routines update (784 KB)

    [advcheck164.zip]
    InstallDate=2009-09-20
    ReleaseDate=2009-09-09
    URL=http://www.spybotupdates.com/updates/files/advcheck164.zip
    LocalFile=C:\Program Files\Spybot - Search & Destroy\Updates\advcheck164.zip
    UpdateName=Advanced detection library 1.6.4
    Description=!Advanced detection routines update (792 KB)

    * where did the false positive occur? - on installing Zone Alarm Update V9.1.008.00
    o Scan result? - N/A not a scan
    o after fix? - N/A not a scan
    o Spybot message at start of scan? - not N/A a scan
    o Teatimer message when a program was executed? - details not noted but similar to that shown in your original post re an Adobe install
    o not reachable/restricted website? - ????
    o SDHelper popup? - ???

    Log report read:-
    05/11/2009 09:29:52 Allowed (based on user decision) value "ISW" (new data: ""C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"") added in System Startup global entry!
    05/11/2009 09:29:53 Encountered and terminated 2Search in C:\Program Files\CheckPoint\ZAForceField\ForceField.exe!

    Thanks
    Richard

  2. #42
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    Quote Originally Posted by rbaker01 View Post
    Hi
    SpyBot Tea Timer reported a problem whilst I was installing Zone Alarm ISS Upgrade V9.1.008.00. Is this a false positive?
    I've not reproduced this occurence as I've not re-installed the ZoneAlarm
    Hello I was also not able to reproduce this false positive, please try to restart the installation of Zone Alarm ISS Upgrade after restarting the TeaTimer.

    restarting TeaTimer:

    * start Spybot S&D
    * switch to advanced mode
    * navigate to "Tools" , then "Resident"
    * uncheck the check box for Resident TeaTimer to close TeaTimer
    * wait a bit so TeaTimer can unload completely, for instance wait 1min
    * check the check box for Resident TeaTimer again to restart the TeaTimer


    For the next update scheduled for Wednesday 2009-11-11 I have also added the digital signature for the ZoneAlarm update into our whitelist, just in case.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  3. #43
    Junior Member
    Join Date
    Dec 2005
    Posts
    1

    Default Another False Postive (I think)

    After the last update to Seek & Destroy, it decided to delete a bit of software called Netmeter. This only measures the upload & download rate of my internet connection (in graph form). So am wonder why..?!

    PC OS Windows XP (SP3)
    Mainly use Firefox (sometimes use IE8)

  4. #44
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    Quote Originally Posted by rn5577 View Post
    After the last update to Seek & Destroy, it decided to delete a bit of software called Netmeter. This only measures the upload & download rate of my internet connection (in graph form). So am wonder why..?!

    PC OS Windows XP (SP3)
    Mainly use Firefox (sometimes use IE8)
    Please restart TeaTimer as described above, if the false positive reoccurs please send the respective file to detections@spybot.info for analysis.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  5. #45
    Junior Member
    Join Date
    Nov 2009
    Posts
    22

    Default

    I to have updated Spybot and have got the same problem as rn5577.Also when I got the error message it did not give me one file it indicated that it was the whole folder.

  6. #46
    Junior Member
    Join Date
    Nov 2009
    Posts
    1

    Default FCEUX False Positive

    Computer was running FCEUX emulator just fine, then after definition update this weekend it's getting flagged as "rbot.skp". This, clearly, caused a little flip out where the program was deleted and reinstalled from an archived copy but having the same issue. Since the old file should be fine, I am relatively sure this is a false positive. The spybot update occurred somewhere around Nov 21, 2009 but I am not sure how long it had been since the update before that.

    Why must Spybot hate on classic NES?

  7. #47
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    @acustomer

    here you will receive more information on why the false positive happens with Rbot.skp

    @jonny109

    we require more information on your issue, the TeaTimer does not flag folders, it monitors registry changes and file execution. Here you will find information on how to provide more information so we can analyze this issue.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  8. #48
    Junior Member
    Join Date
    Nov 2009
    Posts
    22

    Exclamation

    Thank you Yodama for your advise and responce I have done what your linked asked me to do. Should I upload the file to this fourm or should I send it to an email address?
    thanks
    Last edited by jonny109; 2009-11-24 at 22:37.

  9. #49
    Junior Member
    Join Date
    Oct 2006
    Posts
    18

    Default

    I am getting a false positive on the file windows_server.exe which is the teamspeak server executable labeling it as Rbot.skp this happened right after an update the day of this post. I am currently running a scan. Running Zonealarm Security suite on a Vista box. Have to go home will send more info later.

  10. #50
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    @jonny109
    you can send the information to detections@spybot.info
    attaching to the forums is also possible if the file size does not exceed the attachment limits for the forums.

    @kentlowt
    wait for the next detection udpate scheduled for Wednesday 2009-11-25 and restart the TeaTimer after the update, alternatively restart your computer after the update. This will fix the false positives regarding Rbot.skp.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •