Ewido detects part of Visual Studio as CWS - False Positive

Discussion in 'ewido anti-spyware forum' started by Mrkvonic, Mar 15, 2006.

Thread Status:
Not open for further replies.
  1. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,696
    Hello,

    On one of my pcs, I did a quick scan with Ewido (latesat database) last night. It flagged a registry key in Visual Studio as adware.coolwebsearch. This did not happen during any previous scan with Ewido. Visual Studio is installed on that pc for more than a year.

    As a side note, none of the cws symptoms are there, 5-10 other scans give a completely clean slate, ie is very docile and clean of "add-ons". So, I find this a very big FP.

    I don't remember the exact key that was flagged, I forgot to send myself a mail with the report. I will attach the report to the location later when I get to that pc again.

    I do remember a part of the registry path:
    HKLM\Software\Microsoft\Visual Studio\Events\

    STILL, I will write another post later today, with the exact report.

    Sorry for the temporary inconvenience.

    Cheers,
    Mrk
     
  2. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,696
    Hello,
    Here's the full report.

    + Report-Checksum: 93FE16BD

    + Scan result:

    HKLM\SOFTWARE\Microsoft\VisualStudio\Analyzer\Events\{6C736D71-BCBF-11D0-8A23-00AA00B58E10} -> Adware.CoolWebSearch : Ignored

    Mrk
     
Thread Status:
Not open for further replies.