False Positive

[Ivan-Assen Ivanov]

I have installed AT&T's graphviz package (tool for creating
graphs, e.g. flowcharts) and LucasArts' Star Wars Republic
Commando (the demo version). Both are detected as
AproposMedia Browser Modifier due to their use of
libexpat.dll - the dynamic linked version of the excellent
free XML parser Expat. I'm sure many more applications use
Expat and would suffer the same problem.

 

[Sandi Hardmeier]

Vendor false positive reports:
http://www.spynet.com/vendors.aspx

 

[Bill Sanderson]

Yes--this has been posted at least 3 or 4 times in the last week, I think.
Not sure why these things have runs like this--I wonder if the definitions
changed and this is now (mis)detected when previously it was not?

 

[Steve Dodson [MSFT]]

I'll file a bug to investigate

-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

 

[Bill Sanderson]

Thanks!
--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

I'll file a bug to investigate

-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.