Spywarexp Returned by Spybot S&D

  skidzy 18:12 16 Apr 06

After updating Spybot Search and Destroy,it has found this:

spywarexp Libary C:\WINDOWS\system32\fk.dll

Ive ran:

Spywareblaster (active)
Still using MS antispy (clean) Active
Ewido (Clean)
Adaware (clean)

Does anyone know if this is a false positive or if they have first hand experience with this.

All advice is welcome,Thankyou in advance for any replies.

  skidzy 18:24 16 Apr 06

This seems to have been on my system since january,but only found today after updating spybot,spybot is run every week without fail and only returned this today for the first time.

  VoG II 18:27 16 Apr 06

If all of the other programs are reporting 'clear' I would think its a false positive.

Might be worth a scan with a².

  skidzy 18:44 16 Apr 06

Cheers VoG™

Was going to try a2 later,what im curious about is if it is a false positive...what is it related to ?

Ive found the file,and seems to be a file application extension ...but have no idea to what file it is extended to.

  VoG II 18:49 16 Apr 06

Right click it, Properties, Version tab should tell you something about it.

  skidzy 19:32 16 Apr 06

Ok,now this is intersting.

Pc was bought in March 05
This file extension was loaded in January 05.

This pc was bought new from Dixons who have always looked after me very well.

This is the info ive found relating to ...so i thought a false positive.
click here

I guess i will leave this open for a while until im sure what this is ?

a² Running now.
Will update if it finds anything similar.

  VCR97 19:32 16 Apr 06

spywarexp is listed as a Trojan in the update list of 2006-04-97. There's no other reference to it on the Spybot forum.

  skidzy 19:38 16 Apr 06

Thanks vcr
Im now finding loads of info about this via google.
Silly thing is,i run spybot weekly with updates and its never found this before.
So i think spybot has added this to the definitions database recently.

Its apparently a trogan downloader so im a bit concerned how it got on here before we owned the system.
Sounds very naughty to me,maybe Dixons can answer this for me.

  skidzy 19:54 16 Apr 06

Ran a² and found nothing related to this problem.

So if any more ideas,please feel free to suggest your idea's.

  skidzy 20:43 16 Apr 06

File deleted...so far,no harm done.

Thankyou for the replies VoG™ and VCR97

Its very much appreciated.

This thread is now locked and can not be replied to.

How to watch Windows Event live stream, live blog | Microsoft event live stream: Watch Microsoft…

1995-2015: How technology has changed the world in 20 years

This amazing app turns your iPad Pro into a Cintiq

iPhone 7 Plus review: A superb big-screen phablet, but the price tag's enormous | iPhone 7 Plus…