Results 1 to 5 of 5

Thread: Any chance new Wishbone infection is false positive

  1. #1
    Junior Member
    Join Date
    Dec 2006
    Posts
    5

    Default Any chance new Wishbone infection is false positive

    Running Windows XP, all updates installed. Never had a spyware issue before; scan with MalwareBytes and Spybot monthly.

    Today, MalwareBytes came in clean, but spybot detected three entries for Wishbone in the registry:

    Wishbone: [SBI $06D5FD4A] Root class (Registry key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AtlBrCon.AtlBrCon

    Wishbone: [SBI $06D5FD4A] Root class (Registry key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AtlBrCon.AtlBrCon.1

    Wishbone: [SBI $06D5FD4A] Class ID (Registry key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0818D430-6247-11D1-ABEE-00D049C10025}



    Should I use Spybot to remove these three entries?

    A couple of reasons that I think this might be false, but I welcome feedback:

    1) Only three entries; a search on the net suggests real infections are associated with many more positive entries and files that I cannot seem to find on my drive.
    2) I haven't intentionally installed any popup blockers; just use the one that comes within IE8; a review of "add/remove programs" doesn't show any Wishbone entry.
    3) As best as I can tell, the company that made Wishbone is no longer in business; their website is no longer operational.

    Thanks, in advance, for your help!

  2. #2
    Junior Member
    Join Date
    Dec 2006
    Posts
    5

    Default Additional info

    Last check by spybot was 8-4-12; no objects found.

    Haven't noticed any browser slowness or hijack attempts (yet).

    Only installs since last check: changed my antivirus software to mcafee (job required) and updated adobe flash. Also applied Augusts Microsoft updates.

  3. #3
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    Thank you for reporting this issue.
    We will regard it as a false positive for the reasons you stated above.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

  4. #4
    Junior Member
    Join Date
    Dec 2006
    Posts
    5

    Default similar problem on Windows 7

    Just did a new install of Windows 7 (for an unrelated reason). During my initial scan, spybot detected:


    Wishbone: [SBI $06D5FD4A] Root class (Registry key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AtlBrCon.AtlBrCon

    Wishbone: [SBI $06D5FD4A] Root class (Registry key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AtlBrCon.AtlBrCon.1

    Wishbone: [SBI $06D5FD4A] Class ID (Registry key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0818D430-6247-11D1-ABEE-00D049C10025}

    Wishbone: [SBI $06D5FD4A] Root class (Registry key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AtlBrCon.AtlBrCon.1

    Wishbone: [SBI $06D5FD4A] Root class (Registry key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AtlBrCon.AtlBrCon



    Am I the only one still having this problem?

  5. #5
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    hello,

    it seems the corrected detection file on this issue was not uploaded with our update yet. This will be fixed with our next detection update scheduled for Wednesday 2012-09-05.
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •