|
Peer to Peer The 3rd millenium technology! |
|
Thread Tools | Search this Thread | Display Modes |
09-04-02, 01:01 AM | #1 |
Just another cat on the FastTrack...
Join Date: Jan 2002
Location: Hamilton
Posts: 727
|
Ad-aware - False Postives with new RefList
There are at least two false positives on the new ref list:
1) Norton CleanSweep's cscore.dll is being identified as a CometCursor file. 2) sporder.dll -- used by Sygate PF and AdCruncher Proxy -- is being identified as a WebHancer file. Check here for latest info: Lavasoft Support Board > Open forums > Suggestions & Bug reporting link Norton CleanSweep cscore.dll Comet Cursor |
09-04-02, 02:25 AM | #2 |
Unknown Legend
Join Date: Feb 2002
Location: California
Posts: 145
|
Buzz...
Buzz...thanks for the imput..I hope you are right..
..To my understanding there are 5 files that comprise Webhancer..sproder.dll is one of them. It is a reporting file. Why is it being bundled with a firewall program? I would like to see the dust settle fully on this one. This explanation raises more questions than it answers...
__________________
Everyone has to Believe in Something........I Believe I'll have another Beer! |
09-04-02, 03:14 AM | #3 | |
http://www.opennap.cc
Join Date: Apr 2002
Location: The Netherlands
Posts: 7
|
Re: Buzz...
Quote:
Say, if a spyware program would be named win32dll.exe and was in your ~/system folder, would you delete it? |
|
09-04-02, 04:03 AM | #4 | ||
Just another cat on the FastTrack...
Join Date: Jan 2002
Location: Hamilton
Posts: 727
|
Re: Buzz...
Quote:
I got my original info from Ad-aware while checking out the Norton CleanSweep cscore.dll > Comet Cursor issue. (See my post above) I have been reading several pages and excerpts from manuals that I found with google.com (sporder.dll) The first site was cexx.org > Foistware/Spyware: WebHancer About halfway down the page are instructions from WebHancer for uninstalling their program. On the list is the sporder.dll with an indication of a footnote below: Quote:
This function can be used by a firewall\proxy\adblocker program to redirect the URL request correctly... (Also would help spyware\foistware\adware programs intercept your requests as well) But yes, the file does have legitimate uses... |
||
09-04-02, 07:34 AM | #5 |
Join Date: May 2001
Location: New England
Posts: 10,024
|
at least one site now has the older reflist, Ad-aware signature file (ref # 101-04-04-2002) 20 kb instead of ref # 103-07-04-2002. what i'm not sure of, because the site i got this from is a mirror, is if all sites have removed #103, or if this site never had it to start with. you know the deal with ad-aware, if you don't allow a site redirection your browser just times out. this is it below.
http://www.majorgeek.com/index2.html i don't know what's worse, an ad-aware mistake or runaway spyware. nah, the spyware's much worse. ad-ware's doing a great job. they can have their occasional mistake, if that's even what it was, because you know they'll fix it immediately. when the spyware guys blow it they just spend the time lying to you about how great it is. - js. |
09-04-02, 07:55 AM | #6 | |
freak
Join Date: Jan 2002
Location: Hungary
Posts: 906
|
Quote:
__________________
"If you open your mind too wide, people would throw trash in it" |
|
09-04-02, 08:36 AM | #7 |
Join Date: May 2001
Location: New England
Posts: 10,024
|
i had gotten it by itself and i just now got back into the same site. Ad-aware signature file (ref # 103-07-04-2002) 22 kb is still there. that's interesting. http://www.lsfileserv.com/downloads.html
- js. |
12-04-02, 02:13 PM | #8 |
Your friendly neighborhood jackass
Join Date: Mar 2002
Location: Houston
Posts: 25
|
new ad-aware ref file # 105-11-04-2002
havent tried it out yet, but here it is:
Ad-aware signature file (ref # 105-11-04-2002) 22 kb http://www.lsfileserv.com/downloads.html or direct link: Ad-aware signature file (ref # 105-11-04-2002) 22 kb
__________________
"The guy was all over the road. I had to swerve a number of times before I hit him." |
12-04-02, 02:25 PM | #9 |
Join Date: May 2001
Location: New England
Posts: 10,024
|
thanks djakrse, i just ran it and didn't find anything new. don't know whether that's good or bad after these last few days...
- js. |
12-04-02, 02:47 PM | #10 |
Your friendly neighborhood jackass
Join Date: Mar 2002
Location: Houston
Posts: 25
|
same here, nothing new but then im not in the danger zone right now. sorry to hear yer probs, ive certainly had my share.
__________________
"The guy was all over the road. I had to swerve a number of times before I hit him." |
Thread Tools | Search this Thread |
Display Modes | |
|
|