Spybot detects ZioComB in WmiApSrv

[sggaunt]

Another odd one
I recent saw that it is advised to run none admistrator accounts when on the net as spyware etc find it harder to get installed.
I normally run an administrator only account. which runs ok and the following all are up to date, show no problems.

MS Antispyware
Ewido
AdAware
Spybot SD
HiJack this log is clear
AVG Free edition
Stinger scan clear.

So I set up a standard user account and did a spybot scan
in this account Spybot only detects ZioComB in WMiApsrv.exe or rather the registry entry for this file.

Also odd is the proccess info sites dont list this file as infectable and A google for 'ZioComB' gave no results.
Does anyone know what is going on here.


[red]GNBM 4th Feb[/red] More on and other neat UK stuff at forum1091
Steve: Delphi a feersum engin indeed.

 

[erikhertzel]

Every once in a while you may get a false positive with Spybot. I would assume that is what is happening here.

Hope that helps,

Erik

 

[greyted]

Have a read here:

http://securityresponse.symantec.com/avcenter/venc/data/pf/adware.ziocom.b.html

Men occasionally stumble over the truth, but most of them pick themselves up and hurry off as if nothing ever happened.

Sir Winston Churchill

 

[sggaunt]

Thanks for that greyted.
I checked out all the info and couldnt find any of those entrys (which is good). A glitch in spybot caused by running under a login, other than where it was installed perhaps?


[red]GNBM 4th Feb[/red] More on and other neat UK stuff at forum1091
Steve: Delphi a feersum engin indeed.

 

[greyted]

Steve:
Could be that or a false positive as Erik said.

Do you run TeaTimer?

You could have a look at SpywareBlaster:

http://www.javacoolsoftware.com/spywareblaster.html

I prefer this to TeaTimer and it would be a good addition to your security list.



Men occasionally stumble over the truth, but most of them pick themselves up and hurry off as if nothing ever happened.

Sir Winston Churchill