Possible false positive?

[Michael T]

I had posted this in the wrong forum, so here I go again,,,

Opened up my desktop and had a notice on my welcome screen from QuickTime to do an update for 7.6.7 > installed > SBHelper popup > gave me this:

• Process ID: 3688
• Filename: msiexec.exe
• Found in: C:\WINDOWS\system.32\
• Identified as: Rouge.IEAntivirus

OS: XPPro SP3 current
Browser: FF/[IE(for password recovery only)] current
SBs&D: Updated this afternoon and run/immunized, no problems.
SBHelper popup: SBS&D encountered and terminated a process that is listed as part of a malicious program.

Need more info on this?

Michael

[MisterW]

Hello Michael,
it would be very helpful if you could send us this file to detections@spybot.info . So we could analyze the problem

Best regards,
Markus

[Michael T]

Ok, I did the RUN FILE, so it is not in my DL folder. Where would I find this and how to send it to you?

[Yodama]

you can find the file msiexec.exe in C:\WINDOWS\system32\
it is best to zip the file and then attach it to your email to the email address above.
please also make sure that you fully update Spybot S&D and restart your computer after the update.

[Michael T]

Found and sent.

Let me know what you find?

Michael