SpywareBlaster false positive

[Andavari]

eTrust EZ Antivirus is producing a false positive against SpywareBlaster v3.5.1.

 

File Name:

C:\Program Files\SpywareBlaster\sbautoupdate.exe

 

Virus Name:

Win32/Unknown

 

Action Taken:

Deleted

 

Link that eTrust EZ Antivirus produces about the false positive:

http://www3.ca.com/securityadvisor/virusin...32/Unknown&ad=0

[AndyManchesta]

Thanks for the heads up Andavari

 

EZ Antivirus just removed it on mine when I opened the SpywareBlaster folder

 

CA's Description is "Win32/Unknown may be reported when eTrust Antivirus uses advanced heuristic techniques to proactively detect a new parasitic Win32 platform file infector"

 

Its also showing the same on Virus Total after scanning the sbautoupdate.exe file

 

eTrust-Vet (Version 12.4.2160) (Date 04.12.2006) (Result = Win32/Unknown)

 

Ive sent the info to CA and Javacool so hopefully they can get it removed soon.

 

Andy

[krit86lr]

eTrust EZ Antivirus is producing a false positive against SpywareBlaster v3.5.1.

 

File Name:

C:\Program Files\SpywareBlaster\sbautoupdate.exe

 

Virus Name:

Win32/Unknown

 

Action Taken:

Deleted

 

Link that eTrust EZ Antivirus produces about the false positive:

http://www3.ca.com/securityadvisor/virusin...32/Unknown&ad=0

 

Yep! I just got that one today too.

[hazelnut]

Thanks so much Andavari for that warning otherwise I would have been worried.

I not only got the warning you said for Spywareblaster, it said it found the same thing in a Scansoft product I have and in system volume, restore, all at the same time, 2 of which it hasn't deleted, just said they were infected.

[krit86lr]

Thanks so much Andavari for that warning otherwise I would have been worried.

I not only got the warning you said for Spywareblaster, it said it found the same thing in a Scansoft product I have and in system volume, restore, all at the same time, 2 of which it hasn't deleted, just said they were infected.

 

I wonder why it didn't delete it? Do you think that it was another false/positive?

[krit86lr]

It said it found the same thing in a Scansoft product I have and in system volume, restore, all at the same time, 2 of which it hasn't deleted, just said they were infected.

 

I just got the same thing now. It can't delete it because it's in a system restore point. I think that it's another false/positive, but I'm going to delete my restore points and make a new one just in case.

[Andavari]

eTrust EZ Antivirus' second update of the day 'Sig Ver:2161. Sig

Date: 04/12/2006' corrects the false positive against SpywareBlaster.

 

If EZAV's AutoUpdate hasn't yet launched you can manually evoke the update by right-clicking upon it's Real-Time Protection icon located next to the System Clock and select the option 'Update Antivirus'