Results 1 to 2 of 2

Thread: False Positive?

  1. #1
    Junior Member
    Join Date
    Oct 2011
    Posts
    1

    Default False Positive?

    Windows 7 64bit
    Spybot 1.6.2.46: Update 10/12/2011
    Where did the false positive occur: Scan result

    Scan result:
    Search-Explorer: Interface (IPugiObj) (Registry key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

    It says the "Kind" is TrojansC-05. Is this using heuristics?

    When I look for the related TypeLib in the registry, it comes back with the AVG security toolbar, which install with AVG 2012:

    C:\Program Files (x86)\Common Files\AVG Secure Search\ToolBandTlb\8.0.1\

    Is this a false positive?
    Last edited by bobbyZ; 2011-10-12 at 22:55.

  2. #2
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    Thank you for reporting this false positive.
    The interface does belong to the AVG toolbar, it gets detected by the interface name with an old detection rule from 2002.

    This will be corrected with the next detection update.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •