false positive smitfraud-c?

N

ncsche

New member
Hi,
I'm using spybot S&D for a very long time now (thanks for this great security tool by the way!).
After installing Version 1.6.2 I get a teatimer message on various files which I didn't get before - it reports a Smitfraud-C infection. Avira, Malwarebytes & Windows Defender don't report any malware, trojan or virus and after a system backup I took the risk to load the programs. Result is: all is working normal. So I think it's a false positive.
System: Win7 prof./64bit
One of the reported files is cmdow.exe - a simple, small and old commandline tool just for resizing windows which I am using for many years without problems.

By the way: What I am missing after being on a new PC with Win7 is the context menu entry "scan with spybot ...". I also couldn't find any option in the settings.

I just wanted to report this (and can send the file, of course)
 
Last edited:
Received, checked and tested your file.

I can confirm that it is not harmful at all and Spybot S&D has no detection rule that is detecting the CMDOW tool.

In some cases the TeaTimer scan gets interrupted and it causes a false positive. Please make sure to have only one active security software running, for instance if you have Avira Guard activated you should deactivate TeaTimer.

To deativate TeaTimer do the following:
  • start Spybot S&D, switch to advanced mode
  • navigate to Tools - Resident
  • remove the checkmark for Resident "TeaTimer" , this will shutdown TeaTimer and remove it from System start
 
Thank you for your quick reply! I deactivated teatimer as you adviced me.

My second question was about the S&D context menu entry under win7/64.
Is it not available anymore or how can I get it again (I found no option in the settings).

Regards
Norbert
 
I think the easiest way to get this context menu is to reinstall Spybot S&D, you just need to make sure to activate the context menu during installation since it is deactivated by default. See attached screen shot.
 
Thanks again - it worked!
But I think there should not be an option to switch it on or off after installing.
Perhaps a hint for the next version....
 
You must log in or register to reply here.
Back
Top