Ewido reports alot of spyware cookies from Firefox

[aeis2000]

Can someone please enlighten me as to why Ewido keeps reporting firefox as having spyware everytime i do a scan.

I use counterspy and Nod32 but neither of these programs reports any spyware with firefox.

I have tried to remove all spyware reported during a scan but the next time i run Ewido scan it reports the spyware again.

I have attached the scan results. Please advise what is it that i'm doing wrong or not doing.
---------------------------------
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 12:52:41 PM, 12/19/2005
+ Report-Checksum: 2970C27E

+ Scan result:

:mozilla.15:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.16:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.17:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.18:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.45:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Euroclick : Cleaned with backup
:mozilla.46:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Euroclick : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Euroclick : Cleaned with backup
:mozilla.90:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.91:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.92:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.93:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.105:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Hypertracker : Cleaned with backup
:mozilla.106:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.199:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup

C:\Documents and Settings\Local Settings\Application Data\Mozilla\Firefox\Profiles\2st3051t.default\Cache\BACF27ECd01/revolt.dll -> Trojan.Zapchast : Error during cleaning


::Report End

[vinzenz.ewido]

Hi,

Please proceed the following steps:

1) update the ewido anti-malware (formerly known as ewido security suite)
2) Restart your computer
3) After hearing your computer beep once during startup, but
before the Windows icon appears, press F8.
4) Instead of Windows loading as normal, a menu should appear
5) Select the first option, to run Windows in Safe Mode.
6) execute a complete system scan with ewido anti-malware (formerly known as ewido security suite)


Regarding to your cookies: If you're surfing you will alway get cookies since they come from websites. The ewido security suite guard at the moment doesn't block the creation of cookies. This feature will come with the upcoming version of ewido anti-malware

BR

evilissimo

// Edit More details

[aeis2000]

Thanks vinzenz.ewido!!
Will give that a try. :)

[sweater]

I also got the same thing on my pc... :o and I am just wondering why Ewido is the only one that can detects those spyware cookies... ::) and there are always lots of them. >:(

Why is it that this spyware cookies can only found on a complete system scans and not on fast scans? ??? It takes longer to scan complete scans. :P

[Elwood]

Firefox can be configured to reject third party cookies; third parties are usually where tracking cookies come from. Tools > options > privacy > cookies etc.

You might also want to try CookieCuller (http://cookieculler.mozdev.org/installation.html).

From what I have read, Spywareblaster protects from known tracking cookies in Firefox (its' only function in Gecko based browsers, AFAIK).

[vinzenz.ewido]

{QUOTE-> I also got the same thing on my pc... :o and I am just wondering why Ewido is the only one that can detects those spyware cookies... ::) and there are always lots of them. >:(

Why is it that this spyware cookies can only found on a complete system scans and not on fast scans? ??? It takes longer to scan complete scans. :P <-QUOTE}

Unfortunately the Mozilla/Firefox cookie directory is not included in the scan locations for ewido anti-malware 3.5

We're sorry for this inconvenience. This folder will be included in the upcoming version. The guard of the upcoming version will detect cookies while they're created too and it can be configured that the cookies will be deleted automatically.


BR
Vinzenz

[alan1801]

Hello,

I'm really glad to hear that some one else has had the problem with Firefox cookies. I have tried other forums and no one had ever heard of it.

I downloaded Ewido a while back and ran a scan. It found several hundred thousand of the 'spyware' cookies just like the ones in the above post. When I set it to delete them, it deleted one or two and then crashed the PC. I had to use system restore to get control of my machine back. I use a number of other security apps that never found any of these cookies. Both Firefox and Winpatrol only showed a few cookies that I normally allow. I have heard so many good things about Ewido that I wish there was a way I could use it.

I also tried Ewido's online scan later and had the same thing happen. The funny thing about these 'cookies' is that I cannot find them anywhere on my PC. I followed the file path in windows explorer and there was nothing there.

Definitely a mystery.

[Elwood]

Firefox cookies are stored in a text file named cookies.txt. It is located in your profile folder.

Windows XP: Show Hidden Program or System Files (http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/hiddenfiles.mspx)

Locate your profile folder (http://www.mozilla.org/support/firefox/profile#locate)

Profile Folder - MozillaZine Knowledge Base (http://kb.mozillazine.org/Profile_folder#Firefox)

[alan1801]

I have checked the cookies file and all other files under Firefox but there is nothing there.

[ratchet]

I'm sure that is the same problem I posted about today. I have FF enabled to delete cookies when I close FF. ewidow still finds them. Two consecutive scans same result, and that is what is really annoying! My thread: http://www.wilderssecurity.com/showthread.php?t=121147

P.S. I also delete all cookies with CCleaner all the time too!