Results 1 to 6 of 6

Thread: false positive smitfraud-c?

  1. #1
    Junior Member
    Join Date
    Sep 2011
    Posts
    3

    Default false positive smitfraud-c?

    Hi,
    I'm using spybot S&D for a very long time now (thanks for this great security tool by the way!).
    After installing Version 1.6.2 I get a teatimer message on various files which I didn't get before - it reports a Smitfraud-C infection. Avira, Malwarebytes & Windows Defender don't report any malware, trojan or virus and after a system backup I took the risk to load the programs. Result is: all is working normal. So I think it's a false positive.
    System: Win7 prof./64bit
    One of the reported files is cmdow.exe - a simple, small and old commandline tool just for resizing windows which I am using for many years without problems.

    By the way: What I am missing after being on a new PC with Win7 is the context menu entry "scan with spybot ...". I also couldn't find any option in the settings.

    I just wanted to report this (and can send the file, of course)
    Last edited by ncsche; 2011-09-08 at 04:56.

  2. #2
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    Please send the file to detections@spybot.info with a link to this thread.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  3. #3
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Thumbs up

    Received, checked and tested your file.

    I can confirm that it is not harmful at all and Spybot S&D has no detection rule that is detecting the CMDOW tool.

    In some cases the TeaTimer scan gets interrupted and it causes a false positive. Please make sure to have only one active security software running, for instance if you have Avira Guard activated you should deactivate TeaTimer.

    To deativate TeaTimer do the following:
    • start Spybot S&D, switch to advanced mode
    • navigate to Tools - Resident
    • remove the checkmark for Resident "TeaTimer" , this will shutdown TeaTimer and remove it from System start
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  4. #4
    Junior Member
    Join Date
    Sep 2011
    Posts
    3

    Default

    Thank you for your quick reply! I deactivated teatimer as you adviced me.

    My second question was about the S&D context menu entry under win7/64.
    Is it not available anymore or how can I get it again (I found no option in the settings).

    Regards
    Norbert

  5. #5
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Thumbs up

    I think the easiest way to get this context menu is to reinstall Spybot S&D, you just need to make sure to activate the context menu during installation since it is deactivated by default. See attached screen shot.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  6. #6
    Junior Member
    Join Date
    Sep 2011
    Posts
    3

    Default

    Thanks again - it worked!
    But I think there should not be an option to switch it on or off after installing.
    Perhaps a hint for the next version....

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •