False positive: sporder.dll

[Ron Blewer]

This alerts as the webhancer spyware, but in fact is a
valid Microsoft DLL (see http://www.2-spyware.com/file-
sporder-dll.html). I let Ms-Antispyware delete this and
it broke valid programs on my workstation.

 

[Nobody]

This alerts as the webhancer spyware, but in fact is a
valid Microsoft DLL (see http://www.2-spyware.com/file-
sporder-dll.html). I let Ms-Antispyware delete this and
it broke valid programs on my workstation.

This file DOES often get corrupted by various malware apps (webhancer,
for example, does alter this file). Yours may have been corrupted if
you had that malware. I have that file, and the MS program DID NOT flag
it...

 

[Ron Blewer]

It wasn't corrupted, but the Permeo systray icon utility
somehow interacts with this file, so it seems that anti-
spyware detects this as active. I can send in my copy of
sporder.dll if that helps in the anaylsis, although you
may want to e-mail me: rblewer <at> permeo.com.

Thanks,

Ronnie