Page 1 of 2 12 LastLast
Results 1 to 10 of 22

Thread: EBlaster false positve?

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Junior Member
    Join Date
    Jan 2007
    Posts
    5

    Default EBlaster false positve?

    Running Spybot S&D 1.6.2 updated as of today (4/30).

    Right click scan detects nothing found under Malware but does detect EBlaster under Heuristic for the majority of webpages I download and save as *.mht files.

    I noticed that Eblaster detection was updated on 4/29; possibly falsepositive?

    For example, I saved: http://www.safer-networking.org/en/spybotsd/index.html to my desktop today, and Spybot detected EBlaster (heuristic).

  2. #2
    Junior Member
    Join Date
    May 2009
    Posts
    3

    Default Heuristic Scan - Image Files showing EBlaster Infection

    Following an upgrade today to Ver 1.6.6.32 Some but not all files with a png jpg and zip extention are showing EBlaster Infection on Heuristic Scan Only. When tested with Spyware Doctor all is ok.

    I have searched for EBlaster Programs,Process's and the Registry with no sign of EBlaster Infection.

    I have to admit I am thinking along the same lines however as a person that deals in facts and not fiction, I would like to know if other forum members are having issues as well or if Spybot can confirm this is a legitimate infection.

  3. #3
    Junior Member
    Join Date
    May 2009
    Posts
    2

    Default

    Quote Originally Posted by oldwolfe View Post
    Following an upgrade today to Ver 1.6.6.32 Some but not all files with a png jpg and zip extention are showing EBlaster Infection on Heuristic Scan Only. When tested with Spyware Doctor all is ok.

    I have searched for EBlaster Programs,Process's and the Registry with no sign of EBlaster Infection.

    I have to admit I am thinking along the same lines however as a person that deals in facts and not fiction, I would like to know if other forum members are having issues as well or if Spybot can confirm this is a legitimate infection.
    I've been having the same problems--right-click on a folder which has .zip files or .mse-set files [used for Magic Set Editor, a program used to design card sets] or .jpg files, and I get eblaster detected under heuristics. If I scan the complete harddrive through SB-S&D nothing is noticed out of the ordinary. Norton doesn't detect anything wrong. Ad-aware doesn't detect anything wrong. It's been driving me crazy and absolutely paranoid the last few days that someone has been tracking everything I type. I've gone into the registry and searched the harddrive looking for files/keys that fit the description for eblaster and found nothing. Any feedback on this would be appreciated. I've begun suspecting the presence of false positives . . . .

    Hmmm, are those men with white coats and hug-me-jackets standing out on my front porch?

  4. #4
    Junior Member
    Join Date
    May 2009
    Posts
    2

    Default

    * Operating System--Windows XP Professional (SP3)
    * Browser--FireFox 5.0
    * Spybot S&D 1.6.2.46 (04/30/09)
    * right-click Heuristic scan result of Eblaster found on various .zip, .jpg, .png, .mse-set files and at least one .htm file, some of which were downloaded, others which I created within the last couple of months. I find no other indications of eblaster within the registry or files on the computer.

    Thanks for any feedback.

  5. #5
    Junior Member
    Join Date
    Jul 2007
    Posts
    16

    Default EBlaster

    Anyone have any further info on this?

    Interestingly, the files I get on a daily basis, 2 came thru this afternoon; I tested and they were clean (these are zipped archives). 3rd one came late in the day and it shows as having EBlaster; so now I am really concerned that it isn't a false positive.

    Is there anyway to scan the individual files within the zip? Maybe that would pinpoint something.
    Last edited by rabbitchaser; 2009-05-02 at 03:34.

  6. #6
    Junior Member
    Join Date
    May 2009
    Posts
    1

    Default

    Quote Originally Posted by oldwolfe View Post
    Following an upgrade today to Ver 1.6.6.32 Some but not all files with a png jpg and zip extention are showing EBlaster Infection on Heuristic Scan Only. When tested with Spyware Doctor all is ok.

    I have searched for EBlaster Programs,Process's and the Registry with no sign of EBlaster Infection.

    I have to admit I am thinking along the same lines however as a person that deals in facts and not fiction, I would like to know if other forum members are having issues as well or if Spybot can confirm this is a legitimate infection.
    I'm finding the same thing in some .jpg files. It doesn't show up on the other scan either, and other programs don't detect it. Can anyone confirm that this actually is a false positive?

  7. #7
    Junior Member
    Join Date
    May 2009
    Posts
    3

    Default Further to this

    I have changed one of the (Infected) png files to a gif file using photoshop and retried the Heuristic test and it shows nothing found.

    As the last update lists +EBlaster was added to the definitions list, how do I heal infected png,jpg and zip files that have failed the Heuristic test.

  8. #8
    Junior Member
    Join Date
    May 2009
    Posts
    2

    Question False Positive eblaster in heuristic

    I have been experiencing the same problem since I updated Spybot yesterday. Previously, the same pdf files passed. They come from reliable sources; e.g., The New York Times Digest. Now, eblaster is shown in the heuristic test. Is this a false positive?

    I did pretty much the same things as Highland Raider. I scanned the complete hard drive through SB-S&D with no problem. I ran Ad-Aware, which indicated no malicious stuff. I also ran a virus scan with no problem.

    Only the right click shows EBlaster in Heuristic.

    What to do? Please advise. Thank you.
    Last edited by elbee; 2009-05-03 at 18:18. Reason: To clarify

  9. #9
    Junior Member
    Join Date
    Jan 2009
    Posts
    12

    Default EBlaster found everywhere

    When I do a folder scan. I have a lot of files that show in the Heuristic scan as EBlaster. Is there a way to get rid of these? Most of them are thumbs.db and pdf's. I have a lot of them.

    Thanks for the help....

  10. #10
    Senior Member Matt's Avatar
    Join Date
    Aug 2006
    Location
    Bavaria
    Posts
    1,169

    Default

    Hi elbee,

    Quote Originally Posted by elbee View Post
    Is this a false positive?
    Looks like a false positive, yes. I'm sure that TeamSpybot will fix it.
    Best regards - Beste Gre,

    Matt

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •