Trojan - real or false positive ?

[Buckster]

anyone know if this one is real of false positive ?

found and deleted by Superantispyware - but then re-appears after a few days

not found by any other of my Spyware checkers, NOD32, Kaspersky (which runs full time in realtime), Spybot

Trojan.Unclassified/RegSVR-fake

c:\windows\system32\embedded\regsvr.exe

any ideas please ?

 

[JimAroo]

Try running Hijackthis, then submit the log online.

http://www.hijackthis.de/en

 

[Buckster]

ah good idea thanks - I feel like re-installing but its a faff if its just a false positive

 

[JimAroo]

ah good idea thanks - I feel like re-installing but its a faff if its just a false positive

Would not suprise me if it is.

 

[Snograt]

I had serious misgivings about a program called SUPERantispyware - sounds like yer archetypal rogue application. Turns out that it's a newcomer in the market and that it's very, very good.

http://www.wilderssecurity.com/showthread.php?t=134804

Sadly, SUPER's website doesn't have a malware library so there's no info on this particular "threat".

 

[Buckster]

thanks Snograt - I've always been suspicious of free software with paid versions being over "sensitive" - ie look we've found X .... aren't we a great program

not saying thats the case for Superantispyware - but you never know with these things

 

[Tombo]

Superantispyware looks like it has spyware in itself.

 

[tonyf1971]

Super Antispyware isnt a rogue app

check the wilders security forms its very well respected there

edit- to say contact SAS support they are normally very good

 

[OCdude]

I vaguely remember that filename... from a REALLY annoying MSN trojan that was going around the office at work... although NOD managed to detect and clean it....

 

[JimAroo]

The name even sounds dodgy, in my opinion.

I'd use something like Spy sweeper myself.

 

[bledd]

Super Antispyware isnt a rogue app

check the wilders security forms its very well respected there

correct