Adware.BHO.EZX (FP) ?

[afariac]

Hi,
SD + AV version 6.0.1.440, database version 6.12100, detect:

4/2/2009 6:35:52 PM:109
IntelliGuard: System Event Blocked
Threat Name - Adware.BHO.EZX
Details - Spyware Doctor has blocked an application attempting to access a file.
Risk Level - Low
Infection - C:\PROGRAM FILES\CCLEANER\UNINST.EXE

UNINST.EXE is part of the program ccleaner version 2.18.878 (http://www.ccleaner.com/).

FP or infection?

Thanks.

[AChen]

Hi,

I just tested this and it does look like an FP :)
Will send this to the MRC team to resolve.

[exn01]

Hi,

Just found another one from GoodSync -

11/04/2009 5:11:29 PM:661
Infection cleaned
Threat Name - Adware.BHO.EZX
Type - File
Risk Level - Low
Infection - C:\Program Files\Siber Systems\GoodSync\Uninstall.exe

I have contacted GoodSync support:

My latest scan with PC Tools Spyware Doctor just quarantined the Goodsync uninstall.exe because it contains the adware.BHO.EZX. The latest Goodsync update came from cnet, filename is goodsync-cnetg.exe

What is this?

And this is the response:

Thank you for your message.
GoodSync does not have any spyware or adware inside, our company is a partner of the
Better Busines Bureau, and has nothing but good feedback on other websites.

Obviously it is a false-positive alert.

Is it possible to get a confirmation?

Thanks...

[AChen]

Hi,

Just found another one from GoodSync -

11/04/2009 5:11:29 PM:661
Infection cleaned
Threat Name - Adware.BHO.EZX
Type - File
Risk Level - Low
Infection - C:\Program Files\Siber Systems\GoodSync\Uninstall.exe



I was able to recreate the problem and have passed this off to the MRC team to investigate :)

[k1gpnet]

i have the same problem 2 files CCleaner uninstal.exe and .LNK infected by Adware.BHO.EZX i have delete them scan again nothing but when i TRY TO LOG IN the forum Spywaredoctor BLOCK Adware.SPONSOR and i cannot log in thats something wrong in the registry that most Antivirus,ANtispyware programs does not detect it (after deleting the files and REINSTALL CCleaner the problem stay again)

[AChen]

i have the same problem 2 files CCleaner uninstal.exe and .LNK infected by Adware.BHO.EZX i have delete them scan again nothing but when i TRY TO LOG IN the forum Spywaredoctor BLOCK Adware.SPONSOR and i cannot log in thats something wrong in the registry that most Antivirus,ANtispyware programs does not detect it (after deleting the files and REINSTALL CCleaner the problem stay again)

I could not recreate the detection with CCleaner uninstal.exe and .lnk. Could you attach the files that SD is detecting and also attach the history file from SD and we'll check this out further.

[exn01]

I also have CCleaner installed, but I don't get any detections. I checked the c:\program files\ccleaner, and there is only a uninst.exe (no uninstal.exe) which I manually scanned and came up clean.

My version of CCleaner is v2.18.878

[AChen]

Sorry, mine is uninst.exe as well :)