Bill's post is very important here because you could take
away F-Secures ability to upgrade by removing the backweb
entries, Its not really that malicious no matter who put
it there, F-Secure use it as Bill said and IBM, HP,
Kodak,Logitech,Siemens,BritishTelecom,KLA Tencor and
various other companies also usually as a update feature.
With most it does seem pointless to have it starting up
every time you reboot the machine as updates do not come
that often but I wouldnt call it malicious myself and do
not regard it as a big problem. Taking away then start up
entry using msconfig would be enough but its not advised
if its related to F-Secure.
Also you should be cautious of Spy Ferret, I tested one
of thier free scanners a couple of months ago and got a
ISTbar variant detection by scanning the setup file at
Jotti's malware scan site. The detection was from Clam
Antivirus which is known to give false positives but when
I tried the Free scan again a week later it was a
different set up file and was a different size, This then
showed clear in the malware scan .
Ive just got the free scanner from Spy Ferret again while
writing this and now ArcaBit AntiVirus is showing its
infected with W32.Generic. I do not know much about the
Antivirus company or W32.Generic But Mcafee have it
listed as a Internet Worm
http://vil.nai.com/vil/content/v_100342.htm
Something is clearly wrong with Spyferret as they keep
changing the file and that's the second infected warning
Ive now seen with thier free scanner so I would advise
you uninstall it and use trusted scanners such as MS
Antispy,Ad-AwareSE & SpyBotS&D.
Regards
Andy
