View Full Version : Spyware found in Filechecker Unistall Prog.
ric
December 2nd, 2004, 08:59 PM
FOUND by Spy Sweeper... Spyware name: SpyMyPc Pro. Location: c:\programfiles\filechecker\unis000.exe Fingerprint type: exact match. Category: System Monitor INFO: Spy Installation Shield Found: SpyMyPc Pro. Ver.1.9 Execution Denied. Spy Sweeper Removed & Quarantined The Uninstaller. Note This Prog. Is Activated When You Try to Uninstall Filechecker. Other Info from Spy Sweeper... SpyMyPc Pro. is a award winning highly flexible all-around desktop security monitoring solution. It logs ALL key strokes, apps., windows, websites, internet connections, passwords & chats. Quite the Program. Any one else found this? Has Anyone used or Knows about this program? This Was found to-day At 5:00pm est. Dec.\02\04. ric
Harold77
December 2nd, 2004, 09:35 PM
Most likely a false positive since I got the same indication on different program's unis000.exe using Spysweeper on a scan today after updating to the latest definitions.
As infrequently as Spysweeper's definitions are updated, it may be awhile before you get a new update to see if it still finds it in the future.... I just quaranteed it and left it at that, it shouldn't be a problem unless you empty the quarantee files in Spysweeper.:)
snapdragin
December 2nd, 2004, 09:41 PM
Hi ric, and welcome to the Forum.
The uninstaller I have in my FileChecker folder is spelled unins000.exe, not unis000.exe, unless you've made a typo. (see attached pic).
Did you download FileChecker from the correct link:
FileChecker v1.7 (http://www.javacoolsoftware.com/filechecker.html)
As Harold77 said, this does look like a false/positive by Spy Sweeper.
Regards,
snap
Dazed_and_Confused
December 4th, 2004, 03:17 PM
-{ Quote: "... I got the same indication on different program's unis000.exe using Spysweeper on a scan today after updating to the latest definitions...." }-
Same here, inside JV16Power Tools unins000.exe file. Agreed - must be a false positive.
fender
December 6th, 2004, 11:07 AM
I emptied the quarantine file that showed SPyMyPC. Why is that a problem?
Harold77
December 6th, 2004, 02:56 PM
You can empty the quarantined files in Spysweeper by deleting them or restoring them to the original location... deleting an unints000.exe will probably make it impossible to uninstall that program without reinstalling it to replace the uninstaller the program requires to function properly.:)
fender
December 14th, 2004, 03:14 PM
I notified Webroot about this possible problem and this is their response:
Hello,
SpyMyPC is not something that we detect by accident. Our software includes definitions that find this program.
There are many legitimate programs on the market that are, by their design, spyware. SpyMyPC is one of these applications. These may include anything from system monitors that IT professionals use to monitor users on corporate networks to Parental Control software. Due to the misuse of many of these tools, we will not remove software from our lists based on commercial availability.
If you want to keep this program from being removed for any reason, there are instructions included below that elaborate on how to prevent Spy Sweeper from detecting and removing this program. If you do not want this software running on your system, you can let spy sweeper handle the removal process.
If you want more information on what SpyMyPC Pro is, you can check out the official website here: http://www.benutec.com/spymypcpro.htm
_________________
Do we all still think it is a false positive?
Dazed_and_Confused
December 14th, 2004, 09:20 PM
-{ Quote: "Do we all still think it is a false positive?" }-
Must be. What would it be doing in an uninstall utility? ???
Harold77
December 14th, 2004, 09:26 PM
On the next Spysweeper update after the one that found this so called spyware in uninst.exe files, subsequent scans on my computer did not find uninst.exe files as being spyware anymore, so apparently some change in the new definitions eliminated the problem.:)
vBulletin® Copyright ©2000-2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums