sas false positive?

  sunnystaines 19:02 PM 17 Jul 11

anyone been getting false positives last few days with superantispyware. been getting "hijacker deskbar" & "HBHelper" which it needs reboot to clean but is back on its next scan.

full scan with malwarebytes and norton 2011 show clean results

  rdave13 22:15 PM 17 Jul 11

Will run a scan now. If you still have Spybot S&D might be worth running a scan with that.

  rdave13 22:46 PM 17 Jul 11

Nothing - just four cookies.

  sunnystaines 08:30 AM 18 Jul 11

rdave thanks i will try some online scans

  Secret-Squirrel 08:41 AM 18 Jul 11

Sunny, if it's a file that SAS is identifying as malware, and you know its location on your PC, then you can upload it to one or both of these malware scanning sites:

Jotti's malware scan

Virus Total

Your file will be scanned by anti-virus engines from multiple vendors and a report given. The results should then help you decide whether it's a false positive or not. If it is an FP then you should be able to tell SAS to ignore that file.

  rdave13 11:09 AM 18 Jul 11

Have a look at this thread, link ,cured by restoring an image. Worth running SAS and Malwarebytes in safe mode?

  sunnystaines 12:54 PM 18 Jul 11


read the links downloaded the hitman pro free trial the scan came up clean too.

so i presume a false positive just got to wait for sas to fix. i was unable to copy and paste the sas results to the forum.

  john bunyan 16:54 PM 18 Jul 11

I just ran updated SAS with just the usual adaware tracking cookies found - which it finds better than Malawarebytes.

  sunnystaines 17:59 PM 19 Jul 11

downloaded and run spybot sd clean result too, updated sas and re run still same result, i presume with all other software coming clean on results it must be a fp. thought by now sas would have fixed it. very surprised no one else got it.

  Secret-Squirrel 18:38 PM 19 Jul 11

Sunny, did you see my post from yesterday?

If the object that SAS detects as malware is a file then uploading it to one of those suspicious-file scanners will tell you quickly whether it's an FP or not - it's certainly a lot quicker than installing different anti-malware products and running lengthy scans.

If SAS is detecting something different such as a Registry key then let us know more about it.

  sunnystaines 20:11 PM 19 Jul 11


tried the jotti's link and downloaded their stopzilla program this took forever to scan then reported 79 items but when it came to delete i had to "buy" to delete so hit the unistall during which it offered a free key number [why was this hidden when the software was advertised as free]so registered for the free option then rebooted to complete the clean. thinking i had finally sorted the problem alas a rerun of sas same problems came up again.

i reported the fp to sas but not heard back maybe as i only have the free version. not sure how to upload the results as unable to work out how to copy the results from sas.


This thread is now locked and can not be replied to.

Best Cyber Monday deals 2015 live blog: Best UK Cyber Monday tech deals, sales, discounts & offers

1995-2015: How technology has changed the world in 20 years

#AdventSauceJoyMince - generate a gratuitous Christmas tweet for #GivingTuesday charity

New MacBook Air release date, specs and rumours: 11in MacBook Air to be discontinued