PDA

View Full Version : Optimum insptbar.dll flagged as Dogpile


Bubba
December 23rd, 2005, 09:48 AM
{QUOTE-> ewido anti-malware - Scan report
---------------------------------------------------------
+ Created on: 8:26:58 AM, 12/23/2005
+ Report-Checksum: D8DDDB2D
+ Scan result:
C:\Program Files\OptimumOnline\insptbar.dll -> Spyware.Dogpile : Ignored
::Report End <-QUOTE}As part of my installations for testing cleaners I have various toolbars installed and one of those is the Optimum Toolbar. This particular toolbars insptbar.dll file has a clsid of 720B3C59-7EDE-44d1-AD9C-71106A7550AF which as you can see via the report ewido did not flag....only the insptbar.dll file.

Is this a case of ewido flagging a insptbar.dll file that normally has a clsid of 5E92F538-B50B-46C5-9C5F-C6EECED3F6C6 or 2ab7292b-8f1b-4dc5-a584-280928b28fc9 which are associated with Dogpile :-\

peter.ewido
December 25th, 2005, 07:35 AM
I've tried to get my hands on this file and as far as I can tell this insptbar.dll has indeed a clsid of 720B3C59-7EDE-44d1-AD9C-71106A7550A... The file we have in our database has 57A157FE-F766-46F1-8EB5-4A48BE2F5DAF and is a dogpile toolbar. The reason why both toolbars get detected is that these files are very similar and our engine can detect such slightly modified files... :)

Bubba
December 25th, 2005, 09:11 AM
Thanks for the clarification Peter ;)