EBlaster false positve?

[MartyTX]

Running Spybot S&D 1.6.2 updated as of today (4/30).

Right click scan detects nothing found under Malware but does detect EBlaster under Heuristic for the majority of webpages I download and save as *.mht files.

I noticed that Eblaster detection was updated on 4/29; possibly falsepositive?

For example, I saved: http://www.safer-networking.org/en/spybotsd/index.html to my desktop today, and Spybot detected EBlaster (heuristic).

[oldwolfe]

Following an upgrade today to Ver 1.6.6.32 Some but not all files with a png jpg and zip extention are showing EBlaster Infection on Heuristic Scan Only. When tested with Spyware Doctor all is ok.

I have searched for EBlaster Programs,Process's and the Registry with no sign of EBlaster Infection.

I have to admit I am thinking along the same lines however as a person that deals in facts and not fiction, I would like to know if other forum members are having issues as well or if Spybot can confirm this is a legitimate infection.

[Highland Raider]

Following an upgrade today to Ver 1.6.6.32 Some but not all files with a png jpg and zip extention are showing EBlaster Infection on Heuristic Scan Only. When tested with Spyware Doctor all is ok.

I have searched for EBlaster Programs,Process's and the Registry with no sign of EBlaster Infection.

I have to admit I am thinking along the same lines however as a person that deals in facts and not fiction, I would like to know if other forum members are having issues as well or if Spybot can confirm this is a legitimate infection.

I've been having the same problems--right-click on a folder which has .zip files or .mse-set files [used for Magic Set Editor, a program used to design card sets] or .jpg files, and I get eblaster detected under heuristics. If I scan the complete harddrive through SB-S&D nothing is noticed out of the ordinary. Norton doesn't detect anything wrong. Ad-aware doesn't detect anything wrong. It's been driving me crazy and absolutely paranoid the last few days that someone has been tracking everything I type. I've gone into the registry and searched the harddrive looking for files/keys that fit the description for eblaster and found nothing. Any feedback on this would be appreciated. I've begun suspecting the presence of false positives . . . .

Hmmm, are those men with white coats and hug-me-jackets standing out on my front porch?

[Highland Raider]

* Operating System--Windows XP Professional (SP3)
* Browser--FireFox 5.0
* Spybot S&D 1.6.2.46 (04/30/09)
* right-click Heuristic scan result of Eblaster found on various .zip, .jpg, .png, .mse-set files and at least one .htm file, some of which were downloaded, others which I created within the last couple of months. I find no other indications of eblaster within the registry or files on the computer.

Thanks for any feedback.

[rabbitchaser]

Anyone have any further info on this?

Interestingly, the files I get on a daily basis, 2 came thru this afternoon; I tested and they were clean (these are zipped archives). 3rd one came late in the day and it shows as having EBlaster; so now I am really concerned that it isn't a false positive.

Is there anyway to scan the individual files within the zip? Maybe that would pinpoint something.

[AlexaM]

Following an upgrade today to Ver 1.6.6.32 Some but not all files with a png jpg and zip extention are showing EBlaster Infection on Heuristic Scan Only. When tested with Spyware Doctor all is ok.

I have searched for EBlaster Programs,Process's and the Registry with no sign of EBlaster Infection.

I have to admit I am thinking along the same lines however as a person that deals in facts and not fiction, I would like to know if other forum members are having issues as well or if Spybot can confirm this is a legitimate infection.

I'm finding the same thing in some .jpg files. It doesn't show up on the other scan either, and other programs don't detect it. Can anyone confirm that this actually is a false positive?

[oldwolfe]

I have changed one of the (Infected) png files to a gif file using photoshop and retried the Heuristic test and it shows nothing found.

As the last update lists +EBlaster was added to the definitions list, how do I heal infected png,jpg and zip files that have failed the Heuristic test.

[elbee]

I have been experiencing the same problem since I updated Spybot yesterday. Previously, the same pdf files passed. They come from reliable sources; e.g., The New York Times Digest. Now, eblaster is shown in the heuristic test. Is this a false positive?

I did pretty much the same things as Highland Raider. I scanned the complete hard drive through SB-S&D with no problem. I ran Ad-Aware, which indicated no malicious stuff. I also ran a virus scan with no problem.

Only the right click shows EBlaster in Heuristic.

What to do? Please advise. Thank you.

[toobad22]

When I do a folder scan. I have a lot of files that show in the Heuristic scan as EBlaster. Is there a way to get rid of these? Most of them are thumbs.db and pdf's. I have a lot of them.

Thanks for the help....

[Matt]

Hi elbee,

Is this a false positive?

Looks like a false positive, yes. I'm sure that TeamSpybot will fix it.