removal of spyware message?? - USM Forum -- Message Board

Date: Feb 15, 2005

removal of spyware message??

Date: Feb 15, 2005

From the sticky thread at the top of the board:

Contact Amy Young, USM AAUP president, at: ayoung321@comcast.net if there are questions about how this board is moderated.

Date: Feb 15, 2005

Since my response to the original post vanished into the same ether, I think I need to provide this information for the benefit of anyone who did see the original.

Microsoft Antispyware Beta has a record of reporting false positive results for ActMon Keylogger. In particular, I found several tech discussion boards with a quick Google where the Antispyware program was said to have reported that ActMon was "hidden" in a fairly common file known as zipdll.dll. (This particular dll -- dynamic link library -- file is used to provide PKZip style file compression functionality within other programs.) Interestingly, zipdll.dll is too small to contain ActMon.

In other words, without some additional information about the detection (which we aren't likely to see here), we may assume that the report was probably erroneous, even though "anonymous" may have seen the detection reported on his/her PC.

Date: Feb 15, 2005

quote:
Originally posted by: Invictus
"Since my response to the original post vanished into the same ether, I think I need to provide this information for the benefit of anyone who did see the original.

In other words, without some additional information about the detection (which we aren't likely to see here), we may assume that the report was probably erroneous, even though "anonymous" may have seen the detection reported on his/her PC.
"

The identified/removed file was see32.dll - the description of that file is:

see32.dll description:
SEE32.DLL is a component that is capable of connecting to SMTP servers and sending email. Some key-logger programs use SEE32.DLL for this purpose, although other key-loggers use different SMTP components.

Caveat emptor.

link to Microsoft AntiSpyware beta