Re: Ad-Aware SE False Positives - July 7 Defs in Security http://www.dslreports.com/forum/r13834386 en Sat, 28 Nov 2009 17:17:10 EDT Sat, 28 Nov 2009 17:17:10 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13888205 singer66 : Just wanted to let you know that your suggestion did resolve my problem....thanks alot!]]> http://www.dslreports.com/forum/remark,13888205 Thu, 14 Jul 2005 08:04:33 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13873507 LS MikeW : Hello singer66,
The detection was corrected and you should be able to download the file. What may be happening is that your ISP could be caching files so is serving you the incorrect version of the file. What I would suggest is to manually download the file from our downloads page then extract the defs.ref file to your Ad-Aware directory and say yes when asked if you would like to replace the file and then re-run the scan.]]> http://www.dslreports.com/forum/remark,13873507 Tue, 12 Jul 2005 15:18:42 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13866310 claudeo :
said by anthrorules See Profile:

Get some new darn update servers, Lavasoft!

[RANT]

I really wish ...[/RANT]

Maybe if more of us would pay a buck or two for the free use of their software and their servers they could invest in new servers... ?]]> http://www.dslreports.com/forum/remark,13866310 Mon, 11 Jul 2005 18:29:19 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13866178 Corrine : Someone has the same problem at CCSP: »castlecops.com/p586834-Wildflics···l#586834]]> http://www.dslreports.com/forum/remark,13866178 Mon, 11 Jul 2005 18:14:14 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13865025 singer66 : I am still getting the so-called "false-positives" on Win98 PC and I do have the latest definitions installed:

Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Dialer Object Recognized!
Type : RegValue
Data : Wildflics
TAC Rating : 5
Category : Dialer
Comment : ""
Rootkey : HKEY_USERS
Object : .DEFAULT\software\microsoft\windows\currentversion\run
Value :

Dialer Object Recognized!
Type : RegValue
Data : Wildflics
TAC Rating : 5
Category : Dialer
Comment : ""
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\windows\currentversion\run
Value :

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 2
Objects found so far: 2

I can get Ad-aware to detect (with the newest defs installed from 7/7/05) 2 wildflics dialer entries in the registry (regular or safe mode) and once I reboot...it reinserts back into the registry...every time.

How did you resolve this?]]> http://www.dslreports.com/forum/remark,13865025 Mon, 11 Jul 2005 15:55:37 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13842791 Tactics : yea i'll do the same - it can't hurt anything. thx]]> http://www.dslreports.com/forum/remark,13842791 Fri, 08 Jul 2005 13:13:00 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13842777 Buddel :
said by Tactics See Profile:

So do we restore the entries back in to the registry since it was a fp?
Since Ad-Aware found the entries due to an FP, I restored them back into the registry.]]> http://www.dslreports.com/forum/remark,13842777 Fri, 08 Jul 2005 13:11:08 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13842618 Tactics : So do we restore the entries back in to the registry since it was a fp? I mean did it take something out of the registry that windows needs?

Edit: this reply was meant for dp or anyone that might have a suggestion.

--
"The man who learns only what others know is ignorant as if he learns nothing. The treasures of knowledge are the most rare, and guarded most harshly" -Chronicle of the First Age]]> http://www.dslreports.com/forum/remark,13842618 Fri, 08 Jul 2005 12:52:32 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13842249 anon : :D Hey DP,

Why don't you beta test definitions for Lavasoft ?
I notice your permenently finding F/P's with the software so maybe you could do Lavasoft a favour by beta testing the definitions before there hoisted apon the rest of the users or do you just like showing up Lavasoft's F/P's for kicks:o]]> http://www.dslreports.com/forum/remark,13842249 Fri, 08 Jul 2005 12:03:53 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13840386 dp :
said by LS MikeW See Profile:

Hello,
A new update has been released that addresses this issue. The definition file name will still be SE1R53 07.07.2005 with an increment in the internal build number. After updating you should have the following details:

Reference Number : SE1R53 07.07.2005
Internal build : 62
File size : 488774 Bytes
Total size : 1479419 Bytes
Signature data size : 1447409 Bytes
Reference data size : 31498 Bytes
Signatures total : 41230
CSI Fingerprints total : 943
CSI data size : 32889 Bytes
Target categories : 15
Target families : 704

MD5: 20550846969ccbdafb6c4b4cbdf9d29c
Thanks Mike, all good here now :)
--
Write your questions down on the back of a $20 dollar bill and send them to me]]> http://www.dslreports.com/forum/remark,13840386 Fri, 08 Jul 2005 04:26:32 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13839918 Paradyne5 : I got the false positives as well on a Win 98 machine...ironically, I just got the August edition of Maximum PC and read a review on Ad-Aware. They slammed it for doing a crappy job overall. BTW, don't blame or flame me, I didn't write the article.]]> http://www.dslreports.com/forum/remark,13839918 Fri, 08 Jul 2005 01:37:04 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13838281 TeMerc : Finally DLed latest defs, and no f\ps here for me.]]> http://www.dslreports.com/forum/remark,13838281 Thu, 07 Jul 2005 21:40:30 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13838006 DSL_Steve : I finally was able to download the update and did a "Smart Scan" on a WinMe PC with no detections (i.e. no false positives)]]> http://www.dslreports.com/forum/remark,13838006 Thu, 07 Jul 2005 21:08:01 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13837418 anthrorules : Get some new darn update servers, Lavasoft!

[RANT]

I really wish that these Security Software companies would get their acts together and make their software scalable, including the update process! ugh! It was BitDefender weeks ago, then Grisoft, now Ewido and Lavasoft...it is a frustrating trend...which results in many people turning away from these companies and software products, which puts them more at risk...beyond the functionality of software, companies need to pay more attention to strategies related to making their software scalable to a larger market!

[/RANT]

--
ionSKY Wireless ISP - 2.4GHz - 802.11b - 1.0MB/384kbps | Dell Dimension 4550/WinXP Pro/SP2/768MB Ram -- Dell Inspiron 5150/WinXP Pro/SP2/512MB Ram |Kerio Personal Firewall 2.1.5 | NAT Router/Firewall | NETGEAR WGT624v2 Wireless Firewall/Router]]> http://www.dslreports.com/forum/remark,13837418 Thu, 07 Jul 2005 19:59:34 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13837204 pcdebb : all clean here, but the update was very sluggish coming down (about 45 seconds compared to normally 2~3 seconds)
--
babbling | mvm]]> http://www.dslreports.com/forum/remark,13837204 Thu, 07 Jul 2005 19:37:05 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13837069 Spy : update came through smoothly.]]> http://www.dslreports.com/forum/remark,13837069 Thu, 07 Jul 2005 19:20:49 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13836913 DSL_Steve : I can't get the updates here.]]> http://www.dslreports.com/forum/remark,13836913 Thu, 07 Jul 2005 19:00:25 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13836912 LS MikeW : Hello,
A new update has been released that addresses this issue. The definition file name will still be SE1R53 07.07.2005 with an increment in the internal build number. After updating you should have the following details:

Reference Number : SE1R53 07.07.2005
Internal build : 62
File size : 488774 Bytes
Total size : 1479419 Bytes
Signature data size : 1447409 Bytes
Reference data size : 31498 Bytes
Signatures total : 41230
CSI Fingerprints total : 943
CSI data size : 32889 Bytes
Target categories : 15
Target families : 704

MD5: 20550846969ccbdafb6c4b4cbdf9d29c]]> http://www.dslreports.com/forum/remark,13836912 Thu, 07 Jul 2005 19:00:21 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13835807 dp :
said by boblandy See Profile:

dp See Profile must have displayed it the same way as you as there is no Wildflics showing in that info either... thanks for the clarification
Yes, I displayed it the same way as Bubba See Profile, To Clipboard. I just put it on ignore until Mike reports back. No problem on my W2K box.
--
Write your questions down on the back of a $20 dollar bill and send them to me]]> http://www.dslreports.com/forum/remark,13835807 Thu, 07 Jul 2005 16:43:24 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13835758 Jrb2 : Yep, Thanks Bubba !

On W98SE from the log:

Dialer Object Recognized!
Type : RegValue
Data : Wildflics
TAC Rating : 5
Category : Dialer
Comment : ""
Rootkey : HKEY_USERS
Object : .DEFAULT\software\microsoft\windows\currentversion\run
Value :

Dialer Object Recognized!
Type : RegValue
Data : Wildflics
TAC Rating : 5
Category : Dialer
Comment : ""
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\windows\currentversion\run
Value : ]]> http://www.dslreports.com/forum/remark,13835758 Thu, 07 Jul 2005 16:37:09 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13835633 boblandy :
said by Bubba See Profile:

My above report does not show Wildflics....but it is the same findings matunga had. The difference is in how I displayed the info versus how matunga displayed the info
dp See Profile must have displayed it the same way as you as there is no Wildflics showing in that info either... thanks for the clarification

so far, all win98/winme users report a fp and
zero winxp/win2k users report a fp
except matunga See Profile
that was enough for me to suggest he double-check
--
look out kid they keep it all hid]]> http://www.dslreports.com/forum/remark,13835633 Thu, 07 Jul 2005 16:22:09 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13835561 Bubba :
said by boblandy See Profile:
coupled with the fact that your report shows Wildflics
i'd not be so sure it's a fp
My above report does not show Wildflics....but it is the same findings matunga had. The difference is in how I displayed the info versus how matunga displayed the info. After a scan....if you double click on a Critical Objects entry you can select To Clipboard. If you select the Scan Log tab....the info is somewhat different....and in this case Wildflics shows in the Scan log....but not in the To Clipboard]]> http://www.dslreports.com/forum/remark,13835561 Thu, 07 Jul 2005 16:13:35 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13835259 anthrorules : fwiw...I was able to download the update on two of three computers I use...the one I could not download the update was my laptop, which is connected wiredly (ethernet) in my work's LAN. odd...servers must be busy...error I receieved on laptop -> "Unable to read definition file, try again later" ugh!
--
ionSKY Wireless ISP - 2.4GHz - 802.11b - 1.0MB/384kbps | Dell Dimension 4550/WinXP Pro/SP2/768MB Ram -- Dell Inspiron 5150/WinXP Pro/SP2/512MB Ram |Kerio Personal Firewall 2.1.5 | NAT Router/Firewall | NETGEAR WGT624v2 Wireless Firewall/Router]]> http://www.dslreports.com/forum/remark,13835259 Thu, 07 Jul 2005 15:37:55 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13835200 hayc59 : Windows XP PRO SP2
No False's here ;)]]> http://www.dslreports.com/forum/remark,13835200 Thu, 07 Jul 2005 15:32:29 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13835173 anon : Congratulations Mike&Lavasoft
Your Beta definition testing programme seems to be working well as per norm:o.]]> http://www.dslreports.com/forum/remark,13835173 Thu, 07 Jul 2005 15:29:17 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13835166 Spy : No FP's here on windows xp-sp2.]]> http://www.dslreports.com/forum/remark,13835166 Thu, 07 Jul 2005 15:28:41 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13835153 boblandy :
said by matunga See Profile:

same thing here on win xp sp2: Data : Wildflics
posters are reporting fp's with either w98 or winme
no winxp users report fp
coupled with the fact that your report shows Wildflics
i'd not be so sure it's a fp
jmo
--
look out kid they keep it all hid]]> http://www.dslreports.com/forum/remark,13835153 Thu, 07 Jul 2005 15:26:26 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13835146 Buddel : I also get these false positives (running WinME). Thanks for posting, dp.:)]]> http://www.dslreports.com/forum/remark,13835146 Thu, 07 Jul 2005 15:25:42 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13834903 redwolfe_98 : i did not get any false-positives.. i am running win xpsp2..]]> http://www.dslreports.com/forum/remark,13834903 Thu, 07 Jul 2005 14:51:40 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13834709 TeMerc : Well, as soon as the servers get caught up, so to speak, I'll be able to update and run a scan on both boxes here, until then.....:huh:]]> http://www.dslreports.com/forum/remark,13834709 Thu, 07 Jul 2005 14:26:34 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13834474 Jrb2 : Hey Bubba :)]]> http://www.dslreports.com/forum/remark,13834474 Thu, 07 Jul 2005 14:02:45 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13834422 Bubba : Windows 98SE workstation
Ad-Aware SE Build 1.06r1
Logfile Created on:Thursday, July 07, 2005 12:53:05 PM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R53 07.07.2005

Name: Dialer
Category: Dialer
Object Type:RegValue
Size:1 Bytes
Location:.DEFAULT\software\microsoft\windows\currentversion\run ""
Last Activity:07-07-2005
Relevance:Low
TAC index:5
Comment:""
Description:Generic dialer, installed unsolicited.

Name: Dialer
Category: Dialer
Object Type:RegValue
Size:1 Bytes
Location:software\microsoft\windows\currentversion\run ""
Last Activity:07-07-2005
Relevance:Low
TAC index:5
Comment:""
Description:Generic dialer, installed unsolicited.]]> http://www.dslreports.com/forum/remark,13834422 Thu, 07 Jul 2005 13:57:14 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13834386 Jrb2 : Hi Guys,

Same here on my W98SE.
Thanks DP for your posting !
Thanks LS MikeW for looking at it.

PS-1.
I don't know how to post here without smilies enabled.
PS-2.
Mike,
I have 3 more (having those for a long time; maybe due to my set-up).

Cheers, Jan.]]> http://www.dslreports.com/forum/remark,13834386 Thu, 07 Jul 2005 13:52:38 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13834193 matunga : same thing here on win xp sp2:

Dialer Object Recognized!
Type : RegValue
Data : Wildflics
TAC Rating : 5
Category : Dialer
Comment : ""
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\windows\currentversion\run
Value :

it's a clamorous false positive!]]> http://www.dslreports.com/forum/remark,13834193 Thu, 07 Jul 2005 13:30:08 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13834157 DSL_Steve :
said by dp See Profile:

Name: Dialer
Category: Dialer
Object Type:RegValue
Size:1 Bytes
Location:.DEFAULT\software\microsoft\windows\currentversion\run ""
Last Activity:7-7-2005
Relevance:Low
TAC index:5
Comment:""
Description:Generic dialer, installed unsolicited.

Name: Dialer
Category: Dialer
Object Type:RegValue
Size:1 Bytes
Location:software\microsoft\windows\currentversion\run ""
Last Activity:7-7-2005
Relevance:Low
TAC index:5
Comment:""
Description:Generic dialer, installed unsolicited.

I have no empty string values at these locations. Running WinME.
When I get home tonight I'll update Adaware on my WinMe PC and post back here with the results.]]> http://www.dslreports.com/forum/remark,13834157 Thu, 07 Jul 2005 13:24:45 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13834122 LS MikeW : Dp,
Thank you for the report and we are looking into this. ]]> http://www.dslreports.com/forum/remark,13834122 Thu, 07 Jul 2005 13:19:54 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13834020 dp :
said by boblandy See Profile:

fwiw & fyi...

i ran scans with the 7/7 defs on win2k and winxp with no fp's
Agree, my W2K SP4 also was clean. The F/P has been picked up on 3 machines all running WinME.
--
Write your questions down on the back of a $20 dollar bill and send them to me]]> http://www.dslreports.com/forum/remark,13834020 Thu, 07 Jul 2005 13:05:03 EDT Re: Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13833857 boblandy : fwiw & fyi...

i ran scans with the 7/7 defs on win2k and winxp with no fp's
--
look out kid they keep it all hid]]> http://www.dslreports.com/forum/remark,13833857 Thu, 07 Jul 2005 12:43:29 EDT Ad-Aware SE False Positives - July 7 Defs http://www.dslreports.com/forum/remark,13833729 dp : Name: Dialer
Category: Dialer
Object Type:RegValue
Size:1 Bytes
Location:.DEFAULT\software\microsoft\windows\currentversion\run ""
Last Activity:7-7-2005
Relevance:Low
TAC index:5
Comment:""
Description:Generic dialer, installed unsolicited.

Name: Dialer
Category: Dialer
Object Type:RegValue
Size:1 Bytes
Location:software\microsoft\windows\currentversion\run ""
Last Activity:7-7-2005
Relevance:Low
TAC index:5
Comment:""
Description:Generic dialer, installed unsolicited.

I have no empty string values at these locations. Running WinME.
--
Write your questions down on the back of a $20 dollar bill and send them to me]]> http://www.dslreports.com/forum/remark,13833729 Thu, 07 Jul 2005 12:21:32 EDT