Heur.Suspicious.Attribs

Hello,

Comodo CIS 3.9.95478.509
VSDB version 1327
Heuristic level High
Windows Vista SP2 incl. all updates

Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\AAXZGFVQMKTXLFUT.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\CPPOAVO.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\DVHOTCPIXTPBVMSWET.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\IPODKKYBOPFXV.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\IPSWNSMLLJWKYTFTG.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\ITOZHNOFHZGF.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\JQUQLLNXFBXNK.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\LYLHUNUKPYZNTILWV.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\MMLPIPATXEAOBLA.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\OUIFRBTTM.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\PMSMRJJEZ.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\QYFJSQIBY.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\RQFTSXZQOJ.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\RXOBBLUABQNBO.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\XBKOSTELNUJIWT.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\YHIXOPFKZO.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\YUENDCZGJSIMPAIN.scr
Heur.Suspicious.Attribs C:\Program Files\Spybot - Search & Destroy\ZHMRZXACIHWYX.scr

I have send this via quarantäne submit button to you see my other thread this spybot. is the spybot tzeam contacted you for this problem

I have another one

Heur.Suspicious.Attribs C:\Users\Alexander Robrecht\AppData\Local\Temp\Temp1_Neuer ZIP-komprimierter Ordner.zip_Setup.dll

Hi Mops21

Might not CIS’s report, in this particular instance, be correct?

After all, do the files have weird or unusual attributes? Possible if SS&D wants to either protect the files from the user/system or the user/system from the files… if you know what I mean.

No can i submit the files tothe forum i post it into the spybot forum, too

Yes, of course, submit away. :slight_smile:

here is the file

[attachment deleted by admin]

Here is another one files

[attachment deleted by admin]

Here is another one file

[attachment deleted by admin]

and here

[attachment deleted by admin]

and here

[attachment deleted by admin]

Hi, Mops21,

We will check the submissions to confirm if false positive.

Thanks,
Ionel

Hi,

The mentioned false positives were fixed with DB 1355.

Thanks,
Ionel

Hello,

Here is the file

[attachment deleted by admin]

another file

[attachment deleted by admin]

another file

[attachment deleted by admin]

another file

[attachment deleted by admin]

another file

[attachment deleted by admin]

Hi, Mops21

We will check the files and if false positive, a fix will be added.

Thanks,
Ionel

Hi,

The false positives were fixed with DB 1367.

Thanks,
Ionel

another file

[attachment deleted by admin]