Heur.Suspicious.Attribs

Mops21 · June 14, 2009, 12:37pm

Hello,

Comodo CIS 3.9.95478.509
VSDB version 1327
Heuristic level High
Windows Vista SP2 incl. all updates

Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\AAXZGFVQMKTXLFUT.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\CPPOAVO.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\DVHOTCPIXTPBVMSWET.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\IPODKKYBOPFXV.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\IPSWNSMLLJWKYTFTG.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\ITOZHNOFHZGF.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\JQUQLLNXFBXNK.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\LYLHUNUKPYZNTILWV.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\MMLPIPATXEAOBLA.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\OUIFRBTTM.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\PMSMRJJEZ.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\QYFJSQIBY.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\RQFTSXZQOJ.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\RXOBBLUABQNBO.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\XBKOSTELNUJIWT.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\YHIXOPFKZO.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\YUENDCZGJSIMPAIN.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\ZHMRZXACIHWYX.scr

I have send this via quarantäne submit button to you see my other thread this spybot. is the spybot tzeam contacted you for this problem

Mops21 · June 14, 2009, 12:39pm

I have another one

Heur.Suspicious.Attribs C:\Users\Alexander Robrecht\AppData\Local\Temp\Temp1_Neuer ZIP-komprimierter Ordner.zip_Setup.dll

kail · June 14, 2009, 6:43pm

Hi Mops21

Might not CIS’s report, in this particular instance, be correct?

After all, do the files have weird or unusual attributes? Possible if SS&D wants to either protect the files from the user/system or the user/system from the files… if you know what I mean.

Mops21 · June 15, 2009, 9:39am

No can i submit the files tothe forum i post it into the spybot forum, too

kail · June 15, 2009, 5:19pm

Yes, of course, submit away.

Mops21 · June 17, 2009, 1:20pm

here is the file

[attachment deleted by admin]

Mops21 · June 17, 2009, 2:37pm

Here is another one files

[attachment deleted by admin]

Mops21 · June 17, 2009, 2:39pm

Here is another one file

[attachment deleted by admin]

Mops21 · June 17, 2009, 2:40pm

and here

[attachment deleted by admin]

Mops21 · June 17, 2009, 2:41pm

and here

[attachment deleted by admin]

e_xistense · June 17, 2009, 2:59pm

Hi, Mops21,

We will check the submissions to confirm if false positive.

Thanks,
Ionel

e_xistense · June 17, 2009, 5:15pm

Hi,

The mentioned false positives were fixed with DB 1355.

Thanks,
Ionel

Mops21 · June 18, 2009, 4:25pm

Hello,

Here is the file

[attachment deleted by admin]

Mops21 · June 18, 2009, 4:26pm

another file

[attachment deleted by admin]

Mops21 · June 18, 2009, 4:27pm

another file

[attachment deleted by admin]

Mops21 · June 18, 2009, 4:29pm

another file

[attachment deleted by admin]

Mops21 · June 18, 2009, 4:30pm

another file

[attachment deleted by admin]

e_xistense · June 18, 2009, 5:10pm

Hi, Mops21

We will check the files and if false positive, a fix will be added.

Thanks,
Ionel

e_xistense · June 18, 2009, 7:05pm

Hi,

The false positives were fixed with DB 1367.

Thanks,
Ionel

Mops21 · June 19, 2009, 4:12pm

another file

[attachment deleted by admin]