Spycatcher Express - Question about False Positives, please...

[mediachick]

Hi all,

I was reading the previous posts about Spycatcher and it's notorious false positives - I was kind of suspecting that because I've been noticing that myself. I need a little help though.....

When I look at the Traces that SC gives me for the alleged spyware, I've found that the file it's pointing to is a legit windows file, however, it claims that the file was in \windows\****.*** when I in fact find the legit file in \windows\system32\****.***

I know that some "baddies" will mimic a legit file and place it elsewhere, but I really don't think that's what's happened. I find no other traces (reg keys, etc.), and this "baddie" just suddenly appeared for no reason. I'm quite careful, and there is no reason why this would suddenly happen (no d/l's, programs, etc.)

Question: When SC is giving these false positives, is it possible that they are misrepresenting where the file was actually found? Saying they found it in \windows\****.*** when it was really in \windows\system32\****.*** ?

Major reason is, just after this happened, my internet connection suddenly disappeared. Nonexistent in network connections. I've gone into safe mode and looked at things, scanned with other programs....nothing bad seems to be found, and this is very suspicious to me. I've dealt with a couple of nasty infections before, so I'm on familiar ground. By the way, I use Mozilla, not IE.

Anyone have any info on this?

Thanks!




****************

Yes, this is what happened. Everything's fixed now.









*