SPF & sporder.dll

Discussion in 'other firewalls' started by efjay, Apr 6, 2002.

Thread Status:
Not open for further replies.
  1. efjay

    efjay Guest

    I installed adaware 5.71 and it detects webhancer file sporder.dll, without it sygate will not run, anyone have come across this before and what should i consider as an alternative?  Thanks for any advise
     
  2. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Hello efjay,

    Although sporder.dll indeed is part of webhancer, it seems other software uses this .dll as well; the AdCruncher Proxy does for example.

    It could well be, Adaware is somewhat too fierce here. I suggest excluding this .dll for the time being, drop an email to support@lavasoft.de and wait for an answer.

    regards.

    paul
     
  3. Pieter Arntz

    Pieter Arntz Guest

    Came across the same problem: smc.exe could not start because of missing sporder.dll uninstalling SPF 4 and installing SPF 5 did fix the problem and no new sporder.dll was found.

    Regards,

    Pieter
     
  4. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,350
    Location:
    The Netherlands
    Hi Pieter  :)

    There's a second false positive that's been reported a number of times already:

    Norton CleanSweep's cscore.dll is being identified as a CometCursor file.

    Cheers,
     
  5. snowman

    snowman Guest

         *note

         sporder.dll is used by M$...........would strongly suggest that everyone do alittle research before even considering deleting..........


         for your own peace of mind.......research this issue...

       
     
  6. snowman

    snowman Guest

         sporder.dll    4.0.1381.4            WinSock2 reorder service providers  


    sporder.dll    3.0.1200.50           WinSock2 reorder service providers  
     
  7. snowman

    snowman Guest

          Paul

          this appears to be a f/p.....the dll in question is used by <webhancer and cometcursor>....however, its also used by many other programs........


         
     
  8. efjay

    efjay Guest

    Thanks for all the replies, will see what develops
     
  9. snapdragin

    snapdragin Administrator

    Joined:
    Feb 16, 2002
    Posts:
    8,415
    Location:
    Southern Ont., Canada
    hi

    i was not sure which board to post this one but since it seems to include SPF and, i haven't been to sleep yet  :)
    i'll just post it here and hope it might help.

    since i just got my WinXP Mar 15/02 i've been slowly d/l'ing the things i need for it so i did a check on the dates of each program i installed and compared them with the date the sporder.dll file had as being "created" (i'm guessing this as meaning the first time it was used)

    sporder.dll properties:

    General
    Type of file:  Application Extension
    Opens with: Unknown application
    Location:  C:\WINDOWS\system32
    Size:  8.26KB (8,464 bytes) (shows as 9KB in Explorer)
    Size on disk:  12.0KB (12,288 bytes)
    Created:  Monday, March 25, 2002[/]
    Modified:  Wednesday, October 03, 2001  1:22PM
    Files version:  5.0.2066.1
    Description:  WinSock2 reorder service providers
    Copyright:  Copyright (C) Microsoft Corp. 1981-1999
    Company:  Microsoft Corporation
    Internal Name:  sporder.dll
    Language:  English (United States)
    Original File name:  sporder.dll
    Product Name:  Microsoft(R) Windows(R) 2000 Operating System

    here's a listing of the programs i d/l'ed on the same day that the .dll file is marked as being created: March 25/02

    SPF (installed Mar 25)
    NOD32_AV
    AdAware5-62
    ICQ2002aBeta
    IrFanview
    PSP7 patch
    Winamp279
    WinZip
    HTAstop

    the only program i actually installed was SPF-4.2 bld.872, all the other one's i installed over the next few days (yup, i have mixed priorities... :D..)

    so i am guessing from the .dll's description and that it's opened with "unknown applications" (meaning many) that this is not a .dll that actually downloads a program but installs as an up-dater for the program?

    btw, the next day when i installed the Ad-Aware & did a scan i had no spyware on my system  :D

    don't know if the above would help at all but i hope so cause i just told the world my priorities!!! ~LOL~
     
  10. snapdragin

    snapdragin Administrator

    Joined:
    Feb 16, 2002
    Posts:
    8,415
    Location:
    Southern Ont., Canada
    mmmm....(checks her Yabbc tags)....time for the Test Forum visit!!

    colours...i need colours...and closed tags with the letters in them! LOL
     
  11. spy1

    spy1 Registered Member

    Joined:
    Dec 29, 2002
    Posts:
    3,139
    Location:
    Clover, SC
    snapdragin - Thanks for providing the info! It definitely seems that, in many cases, the AA alert on sporder.dll is merely that - an alert for the user to actually check out what's using the .dll .

    Since it seems like a pretty poor method of detecting spyware/adware on your computer (due to the fact that it's used by so many other, innocent, programs) the best thing to do is just 'Exclude' it from subsequent searches and do not let AA delete it (or if you do, back it up in AA so you can easily get it back if something you need malfunctions). Pete
     
  12. snapdragin

    snapdragin Administrator

    Joined:
    Feb 16, 2002
    Posts:
    8,415
    Location:
    Southern Ont., Canada
    hey there Spy1 :)

    i have not up-dated my Ad-Aware as of yet...i'm one of those that likes to sit and wait for the bugs to be called out... ;)

    and i always backup first...check the files properties & locations then once i am sure it's not needed it's confirmed with a positive that it's definitely spyware then it's gone (of course i do a system backup as a backup too) ~lol~

    i am not sure though what you mean in your post when you said (it's a poor way to check for spywareo_O) ..sorry, i do have to get to the test forum to learn this yabb tagging...then i'll put things in rightful quotation :)
     
  13. spy1

    spy1 Registered Member

    Joined:
    Dec 29, 2002
    Posts:
    3,139
    Location:
    Clover, SC
    (Click on 'Quote' in the post which you wish to post from. That'll throw you into a 'Reply' page where everything is quoted. Remove everything you don't want quoted. After the last [ / quote ] , add any further comments you want. Pete
     
Thread Status:
Not open for further replies.