zipdll.dll and undll.dll

[Les]

I found the above-referenced files when scanning with the
MS Spyware Beta program. I have religously used Ad-
Aware's program prior and these files never showed.

When I did a web search to learn more about the files, I'm
seeing some instances where they are spyware files with a
high threat level and instances where they're used for
file compression and nothing is mentioned about them being
spyware.

The program folder that these files were found in were not
off-the-shelf programs. It is a program used for court
reporting.

Before running the MS Spyware Beta program, I did run Ad-
Aware and these files didn't show.

I also contacted several other court reporters that use
the same software and these files do appear in the same
folder as mine did.

Any thoughts?

 

[Kent W. England]

Les wrote on 08-Jan-2005 5:53 PM:

I found the above-referenced files when scanning with the
MS Spyware Beta program. I have religously used Ad-
Aware's program prior and these files never showed.

When I did a web search to learn more about the files, I'm
seeing some instances where they are spyware files with a
high threat level and instances where they're used for
file compression and nothing is mentioned about them being
spyware.

The program folder that these files were found in were not
off-the-shelf programs. It is a program used for court
reporting.

Before running the MS Spyware Beta program, I did run Ad-
Aware and these files didn't show.

I also contacted several other court reporters that use
the same software and these files do appear in the same
folder as mine did.

Any thoughts?

If your description is 100% accurate, then it would seem that the MS
Antispyware beta is incorrectly identifying your harmless DLLs as
malicious versions. I would advise you to keep the files, especially if
you found no other spyware on your system and if you are not suffering
any spyware symptoms.

 

[Bill Sanderson]

I also contacted several other court reporters that use
the same software and these files do appear in the same
folder as mine did.

One additional thought. You might consider contacting the vendor of the
software in question. Microsoft has a vendor dispute form which can be used
by the vendor to dispute inclusion. These false positives aren't precisely
what that form is meant for but if the software is being disabled by
Microsoft's software, they should get in contact with Microsoft and get this
fixed, I'd think. Here's a KB article which includes the link for problem
resolution:


http://support.microsoft.com/kb/892340 Microsoft Windows AntiSpyware (Beta)
identifies a program as a spyware threat (Listing criteria and Dispute
process)