Results 1 to 4 of 4

Thread: Possible False Positive - TrojanC-05

  1. #1
    Senior Member
    Join Date
    Feb 2012
    Location
    Ireland
    Posts
    176

    Default Possible False Positive - TrojanC-05

    Spybot has detected TrojanC-05 in the following log http://forums.spybot.info/showthread.php?t=65484

    I closed the log as I could not find any malware on the machine. Since then the user PM'd me stating that Spybot detected the trojan again in HKEY_LOCAL_MACHINE\SOFTWARE\Interface\{FC856072-9CC4-4833-8EBA-F62224A62A59}

    Is it possible that this is a false positive?

    Thanks,

    diver79.
    Proud Graduate of the MalWare Removal University

  2. #2
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    Hello,

    I searched our detection database for "{FC856072-9CC4-4833-8EBA-F62224A62A59}" but did not find anything related to it.

    The key you posted is actually not the usual key for an interface id, but I added this one and the id to the regular interface position in the registry and did a scan with Spybot S&D which came up with no result.

    If you still have the log file somewhere it would help in finding this possible false positive.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  3. #3
    Senior Member
    Join Date
    Feb 2012
    Location
    Ireland
    Posts
    176

    Default

    Hi Yodama,

    Apologies for the delay in getting back to you. I asked my user to supply the log but they have opted to R&R the machine.

    Thanks for looking into it though.

    diver79.
    Proud Graduate of the MalWare Removal University

  4. #4
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    thanks for your feedback
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •