False positive: sporder.dll

This alerts as the webhancer spyware, but in fact is a
valid Microsoft DLL (see http://www.2-spyware.com/file-
sporder-dll.html). I let Ms-Antispyware delete this and
it broke valid programs on my workstation.

Ron Blewer wrote:

> This alerts as the webhancer spyware, but in fact is a
> valid Microsoft DLL (see http://www.2-spyware.com/file-
> sporder-dll.html). I let Ms-Antispyware delete this and
> it broke valid programs on my workstation.

This file DOES often get corrupted by various malware apps (webhancer,
for example, does alter this file). Yours may have been corrupted if
you had that malware. I have that file, and the MS program DID NOT flag
it...

It wasn't corrupted, but the Permeo systray icon utility
somehow interacts with this file, so it seems that anti-
spyware detects this as active. I can send in my copy of
sporder.dll if that helps in the anaylsis, although you
may want to e-mail me: rblewer <at> permeo.com.

Thanks,

Ronnie

>-----Original Message-----
>Ron Blewer wrote:
>
>> This alerts as the webhancer spyware, but in fact is a
>> valid Microsoft DLL (see http://www.2-spyware.com/file-
>> sporder-dll.html). I let Ms-Antispyware delete this
and
>> it broke valid programs on my workstation.
>
>This file DOES often get corrupted by various malware
apps (webhancer,
>for example, does alter this file). Yours may have been
corrupted if
>you had that malware. I have that file, and the MS
program DID NOT flag
>it...
>.
>