Need User Feedback: regsvr32.exe and rundll32.exe f.p.?

[steve pas]

Possible FP,
Setup - XP Pro sp2, firefox 3.0.11, spybot 1.6.2.0/1.6.6.32 (8 July definitions)

Right click scan of the following located in windows\system32
regsvr32.exe = Ad Destination
rundll32.exe = win32.Delf.Rtk
both of these were flagged by heuristics part of scan only.

Virustotal, mbam and trojan hunter shows all clear on these two files.

I've used spybot for apprx 4yrs and has been very good on my system,
a big thanks to all involved with spybot.

 

[Yodama]

hello,

this could be false positives of the heuristics part of the single file scanner.
Please email the 2 files to detections@spybot.info for analysis with a reference to this thread.

 

[steve pas]

Greetings,
Files uploaded,
good luck
steve

 

[Yodama]

Thank you for sending in the requested files.
I can confirm that these are false positives with the heuristics part of the single file scanner. A fix will be released with the next detection update scheduled for Wednesday 2009-07-15.

 

[steve pas]

Nice work on swift resolution.
Best regards steve.