False Positive?

False Positive?

Secure Home | Search | About
 Anti-Virus Software    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
False Positive? Marcus 09-10-2005
Posted by Marcus on September 10, 2005, 8:22 am
If you were  Registered and logged in, you could reply and use other advanced thread options

XOFT suddenly finds a windows security update (KB891711) as a Malware
Threat. It calls it a randomly named file....C Windows system:
KB891711 \ KB891711. When I remove it it no longer is on the msconfig
startup menu, which it needs to be. It remains in Windows system. So I
removed and reinstalled the update but XOFT still identifies it as a threat.

So which is the greater threat? Removing the security update.....or ignoring
XOFT's suggestion that it is a threat.

Thanks,

Marcus




Posted by * * Chas on September 10, 2005, 12:20 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

|
| XOFT suddenly finds a windows security update (KB891711) as a Malware
| Threat. It calls it a randomly named file....C Windows system:
| KB891711 \ KB891711. When I remove it it no longer is on the msconfig
| startup menu, which it needs to be. It remains in Windows system. So I
| removed and reinstalled the update but XOFT still identifies it as a
threat.
|
| So which is the greater threat? Removing the security update.....or
ignoring
| XOFT's suggestion that it is a threat.
|
| Thanks,
|
| Marcus

The MS Security Update KB891711 was released to fix "Cursor and Icon
Format Handling Vulnerability" in Win98, Win98SE and Win ME. The
original release was soooo buggy that MS issued a "fixed" version.

Some people haven't had any problems with either version but others
experienced BSOD hell after installing the update. I installed the FIXED
version of KB891711 from Windows Update on a number of my Win98SE PCs
that were running trouble free; it messed most of them up. I promptly
uninstalled KB891711 and the systems work trouble free again.

BTW, why does KB891711.EXE have to run as a startup program anyway?

EDITORIAL: What a great way for Mickeysoft to encourage (force) users to
upgrade to XP, especially less sophisticated folks! Think about it,
unintentionally release a buggy security fix via Windows Update that
causes problems on many users systems then release a "patched" version
that still causes problems then assume a cavalier attitude that these
users should be upgrading to a newer OS anyway! MS was already forced to
extend support for Win98 because of the large number of corporate users
still running the OS so it isn't in their interest to provide the best
support for this product.

Chas.




Posted by Art on September 10, 2005, 4:08 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
wrote:

>XOFT suddenly finds a windows security update (KB891711) as a Malware
>Threat. It calls it a randomly named file....C Windows system:
>KB891711 \ KB891711. When I remove it it no longer is on the msconfig
>startup menu, which it needs to be. It remains in Windows system. So I
>removed and reinstalled the update but XOFT still identifies it as a threat.
>
>So which is the greater threat? Removing the security update.....or ignoring
>XOFT's suggestion that it is a threat.

I guess you mean XOFTSpy? Never heard of it. But having nothing better
to do at the moment, I installed their trial version. It didn't find
anything on my Win 2K PC, so at least it doesn't seem to be one of the
many rogue spyware scanner products that are flooding the internet :)
You know, so many of them will "find" stuff just to sucker you in.

Did you make sure your PC was completely free of a file named
KB891711.EXE ?? And then d/l a fresh copy from MS and install it?
If so, it would seem XSOFT is false alarming.

Art

http://home.epix.net/~artnpeg


Posted by Marcus on September 10, 2005, 10:05 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Did you make sure your PC was completely free of a file named
KB891711.EXE ?? And then d/l a fresh copy from MS and install it?
If so, it would seem XSOFT is false alarming.

Art
........there is such a file in Windows System .....but isn't it necessary as
a startup file for this patch to be effective?

Marcus


wrote:





>XOFT suddenly finds a windows security update (KB891711) as a Malware
>Threat. It calls it a randomly named file....C Windows system:
>KB891711 \ KB891711. When I remove it it no longer is on the msconfig
>startup menu, which it needs to be. It remains in Windows system. So I
>removed and reinstalled the update but XOFT still identifies it as a
threat.
>
>So which is the greater threat? Removing the security update.....or
ignoring
>XOFT's suggestion that it is a threat.

I guess you mean XOFTSpy? Never heard of it. But having nothing better
to do at the moment, I installed their trial version. It didn't find
anything on my Win 2K PC, so at least it doesn't seem to be one of the
many rogue spyware scanner products that are flooding the internet :)
You know, so many of them will "find" stuff just to sucker you in.

Did you make sure your PC was completely free of a file named
KB891711.EXE ?? And then d/l a fresh copy from MS and install it?
If so, it would seem XSOFT is false alarming.

Art

http://home.epix.net/~artnpeg




Posted by Art on September 10, 2005, 5:16 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
wrote:

>Did you make sure your PC was completely free of a file named
>KB891711.EXE ?? And then d/l a fresh copy from MS and install it?
>If so, it would seem XSOFT is false alarming.
>
>Art
>.......there is such a file in Windows System .....but isn't it necessary as
>a startup file for this patch to be effective?

On Win ME it's in folder \windows\system\KB891711
and it's part of the startup group of files, yes.

Art

http://home.epix.net/~artnpeg


Similar ThreadsPosted
False positive? April 8, 2007, 4:28 pm
False Positive on Keylogger??? June 10, 2006, 11:38 am
Malwarebytes false positive July 14, 2008, 10:22 am
False Positive, Posssible / Likely? July 24, 2008, 1:20 pm
Spybot 1.4 Smitfraud-C False Positive? July 29, 2005, 11:23 pm
New False Positive from Spyware Doctor? February 1, 2007, 8:41 pm
Win32:Mhtplo-10 - False positive? November 30, 2007, 3:27 pm
PCANDIS5.sys Trojan or False Positive? June 28, 2008, 5:04 am
AVG false positive reported on user32.dll November 19, 2008, 1:01 am
likely semi-false positive"intrusion" nav05 April 8, 2006, 1:30 am

The site map in XML format XML site map

Contact Us | Privacy Policy