False Positive ?

Discussion in 'ewido anti-spyware forum' started by jiskefet, Dec 17, 2007.

Thread Status:
Not open for further replies.
  1. jiskefet

    jiskefet Registered Member

    Joined:
    Dec 17, 2007
    Posts:
    16
    Location:
    Friesland
    Hi, i did a scan with Avg antispyware free and it came up with this,

    HKU\S-1-5-21-1229272821-412668190-839522115-1004\Software\Valve\Steam\Users\33313890\friends\25750925\\name -> Adware.CoolWebSearch : Ignored.

    false, save to delete ?
     
  2. karl.ewido

    karl.ewido former ewido team

    Joined:
    Dec 9, 2005
    Posts:
    236
    Location:
    Germany
    Please use Windows Registry Editor (regedit.exe) to export this detected key and send us a copy of the exported *.reg file:
    http://www.ewido.net/en/malware/

    NOTE: Make a backup only of this detected key and NOT of the whole registry.
     
  3. jiskefet

    jiskefet Registered Member

    Joined:
    Dec 17, 2007
    Posts:
    16
    Location:
    Friesland
    Oke i uploaded the reg file to ''you'', do i have to put the file in quarantine or just ignore it for the moment ?
     
  4. karl.ewido

    karl.ewido former ewido team

    Joined:
    Dec 9, 2005
    Posts:
    236
    Location:
    Germany
    The detection of this Registry key will be fixed with the next Signature Update. In the meantime you do not need to move it to the quarantine, just ignore the detection.
     
  5. jiskefet

    jiskefet Registered Member

    Joined:
    Dec 17, 2007
    Posts:
    16
    Location:
    Friesland
    Thanks for the fast reply/support :thumb:
     
  6. Nuke

    Nuke Registered Member

    Joined:
    Sep 19, 2006
    Posts:
    134
    Location:
    USA
    Okay, I have read everything and now I am up to speed.

    I deleted the Worm Downloader from my computer. What's next? Do I need to uninstall and reinstall Nod32? Should I do a system restore?

    TIA.
     
  7. karl.ewido

    karl.ewido former ewido team

    Joined:
    Dec 9, 2005
    Posts:
    236
    Location:
    Germany
    Nuke, if you really deleted the NOD32 file and you did not choose to make a backup in the AVG AS Quarantine module, you must reinstall the whole NOD32 Software. This false detection of the NOD32 file will be fixed soon with a new Signature Update.

    Sorry for the inconvenience.
     
Thread Status:
Not open for further replies.