ronob
I'M Fixin It
join:1999-10-18
Fort Lauderdale, FL
1 edit | MS Antispyware F/P?
appears to be same f/p that spybot S/D corrected in Dec 04
»forums.net-integration.net/index···ic=25900
Can ayone confirm this?
Spyware Scan Details
Start Date: 8/7/2005 2:00:11 AM
End Date: 8/7/2005 2:33:58 AM
Total Time: 33 mins 47 secs
Detected Threats
Unclassified.Trojan.93 Browser Modifier more information...
Status: Ignored
Severe threat - Severe-risk items have an extreme potential for harm, such as a security exploit, and should be removed.
Infected registry keys/values detected
HKEY_CLASSES_ROOT\clsid\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\clsid\{5E2121EE-0300-11D4-8D3B-444553540000}\InprocServer32 C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll
HKEY_CLASSES_ROOT\clsid\{5E2121EE-0300-11D4-8D3B-444553540000}\InprocServer32 ThreadingModel Apartment
HKEY_CLASSES_ROOT\clsid\{5E2121EE-0300-11D4-8D3B-444553540000}\ProgID Catalyst Context Menu
HKEY_CLASSES_ROOT\clsid\{5E2121EE-0300-11D4-8D3B-444553540000}\TypeLib {5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\clsid\{5E2121EE-0300-11D4-8D3B-444553540000}\VersionIndependentProgID Catalyst Context Menu
HKEY_CLASSES_ROOT\clsid\{5E2121EE-0300-11D4-8D3B-444553540000} SimpleShlExt Class
Detected Spyware Cookies
No spyware cookies were found during this scan.
--
I've been to the end of the internet!
It's also been reported in their newsgroups »communities.microsoft.com/newsgr···Number=1
Does anyone know how to report this apparent FP? |
|
fuzz
Fuzz
Premium
join:2000-06-05
FuzzLand | I just got the same thing. I allowed it to remove and now I can't start my catalyst control center. CRAP!!!
--
fuzz |
|
CajunTek
Insane Cajun
Premium,MVM
join:2003-08-08
Arlington, TX | reply to ronob
Interesting.. I have MSAS and I have an ATI video card.. I did not see this false positive on my scan today. |
|
fuzz
Fuzz
Premium
join:2000-06-05
FuzzLand | reply to ronob
I just reinstalled catalyst control center and ran another spyware scan and it detected it again. This time I told it to ignore. 
--
fuzz |
|
Allnew
Premium,MVM
join:2003-02-01
Denmark- EU.
clubs:
| reply to CajunTek
said by CajunTek  :Interesting.. I have MSAS and I have an ATI video card.. I did not see this false positive on my scan today. Ditto! |
|
ronob
I'M Fixin It
join:1999-10-18
Fort Lauderdale, FL
| said by Allnew :said by CajunTek :Interesting.. I have MSAS and I have an ATI video card.. I did not see this false positive on my scan today. Ditto! Do you have catalyst control center installed?
--
I've been to the end of the internet! |
|
fuzz
Fuzz
Premium
join:2000-06-05
FuzzLand | reply to ronob
I think you have to have the .NET version of catalyst control center installed for MSAS to detect it.
--
fuzz |
|
CajunTek
Insane Cajun
Premium,MVM
join:2003-08-08
Arlington, TX | reply to ronob
Yes.. and have forever.. XP SP2 fully patched and the latest ATI drivers and control panel stuff..
--
Lost in Texas |
|
ronob
I'M Fixin It
join:1999-10-18
Fort Lauderdale, FL
| reply to ronob
Re: MS Antispyware F/P? /update
From »communities.microsoft.com/newsgr···Number=1
. Reply (E-mail) Forward (E-mail)
Subject: Re: False Positive in def.file 5753 for ATI Radeon Catalyst !!!
From: "Ron Chamberlin" Sent: 8/9/2005 5:59:15 PM
Hi Mikey,
MS is aware of the false hits on this. A fix will be along.
Ron Chamberlin
MS-MVP
"Mikey" wrote in message
news:036d01c59c86$0b011c20$a501280a@phx.gbl...
> Latest MS Spyware trojan definition file erroneously
> quarantines 7 registry entries in HKCR\clsid {5e2121ee-
> 030-11d4-8d3b-44453540000} - ATI Radeon drivers for X9200
> & X850XT video cards running either Catalyst 5.6 or 5.7.
> The errorneously-detected trojan removes this file:
> c:\Program Files\ATI Technology\ATI.ACE\atiacmxx.dll.
>
> This issue may only occur with the "deep scan" setting
> option inside of the MS Beta Spyware Product.
>
> Please expedite resolution and notification of new trojan
> definition file for ATI Radeon customers - thanks!
.
--
I've been to the end of the internet! |
|
