F/P in Spy Sweeper??

[Kay]

Hi,

F/P?

Malwarebytes' Anti-Malware 1.19

Database version: 904

Windows 5.0.2195 Service Pack 4

5:44:04 PM 6/29/2008

mbam-log-6-29-2008 (17-44-02).txt

Scan type: Full Scan (C:\|)

Objects scanned: 69237

Time elapsed: 32 minute(s), 20 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Program Files\Webroot\Spy Sweeper\wrlzma.dll (Trojan.Agent) -> No action taken.

-----------------

Kay

[nosirrah]

Can you please zip and attach that file here so I can look at it .

[Kay]

Sorry for the delay in responding. I had the computer off because of last night's lightning and rain storm. After this morning's update and doing both a quick and a full scan, the Spy Sweeper alert is gone.

Thanks, Kay

[JeanInMontana]

Please find the file and upload it anyway Kay. I get hits on it as malware doing a search.

[Kay]

Jean,

Is this the file that you wanted? I'm not too familiar with WinZip or the process of reporting F/P.

Kay

[JeanInMontana]

You did fine Kay. With XP you don't need WinZip. Nosirrah will have a look at that file and determine if it's good or bad.

[nosirrah]

Looks like a whole bunch of us vendors had this as a FP , 5 still do .

[GT500]

Looks like a whole bunch of us vendors had this as a FP , 5 still do .

Some sort of new driver from webroot?

[nosirrah]

I bet this dll was misused by malware , only way this could have happened .

The file has no version info so there are no obvious signs that we were creating a FP .