MSI drivers misindentified as trojan

[cvalde]

Hello, I have Windows XP SP3 with an NVIDIA GeForce 9500 GT based MSI video card. MSI includes some extra programs (compared to a bare NVidia driver package). In this case, it's
..\system32\winsys2.exe
that's related to MSI overclocking for the video card, but after updating Spybot's detection files, a manual scan shows:

06.09.2009 00:26:17 - ##### check started #####
06.09.2009 00:26:17 - ### Version: 1.6.2
06.09.2009 00:26:17 - ### Date: 06-09-2009 0:26:17
06.09.2009 00:26:19 - ##### checking bots #####
06.09.2009 00:26:45 - ##### check started #####
06.09.2009 00:26:45 - ### Version: 1.6.2
06.09.2009 00:26:45 - ### Date: 06-09-2009 0:26:45
06.09.2009 00:26:47 - ##### checking bots #####
06.09.2009 00:40:19 - found: Win32.Agent.ws Autorun settings (WinSys2)
06.09.2009 00:40:19 - found: Win32.Agent.ws Program file
06.09.2009 00:41:14 - ##### check finished #####

There's indeed a trojan that goes by the same name, but Spybot is the only one that panics. Neither Outpost's scanner nor PrevX nor AdAware flag the file as suspicious.

[Yodama]

Thank you for reporting this issue.
A correction of the detection rules will be released on Wednesday 2009-09-09.