Ewido detects part of Visual Studio as CWS - False Positive

Discussion in 'ewido anti-spyware forum' started by Mrkvonic, Mar 15, 2006.

Thread Status:
Not open for further replies.
  1. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    10,213
    Hello,

    On one of my pcs, I did a quick scan with Ewido (latesat database) last night. It flagged a registry key in Visual Studio as adware.coolwebsearch. This did not happen during any previous scan with Ewido. Visual Studio is installed on that pc for more than a year.

    As a side note, none of the cws symptoms are there, 5-10 other scans give a completely clean slate, ie is very docile and clean of "add-ons". So, I find this a very big FP.

    I don't remember the exact key that was flagged, I forgot to send myself a mail with the report. I will attach the report to the location later when I get to that pc again.

    I do remember a part of the registry path:
    HKLM\Software\Microsoft\Visual Studio\Events\

    STILL, I will write another post later today, with the exact report.

    Sorry for the temporary inconvenience.

    Cheers,
    Mrk
     
  2. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    10,213
    Hello,
    Here's the full report.

    + Report-Checksum: 93FE16BD

    + Scan result:

    HKLM\SOFTWARE\Microsoft\VisualStudio\Analyzer\Events\{6C736D71-BCBF-11D0-8A23-00AA00B58E10} -> Adware.CoolWebSearch : Ignored

    Mrk
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.