Posted by: EricC | August 27, 2010

Incorrect Spyware Signature Uncovered

SecurityCoverage has discovered an issue with an incorrect spyware signature that was released to the SecureIT software on Friday, August 20, 2010.  This signature was released to a limited number of customers and causes no immediate issues for the customer other than a re-occurring pop-up from SecureIT warning that a file has been quarantined.  A repair for this issue follows:

If you are experiencing multiple spyware alerts that keep appearing and reference the following:

XP: Documents&Settings/USERNAME/App/Data/Microsoft/

Vista/7: (USERNAME)/AppData/Roaming/Microsoft or /USERNAME/App/Data/Microsoft/

*** This is a False Positive and refers to a folder directory only, no infections are present.

To resolve the issue, please follow the steps below:

Click the following link or copy and paste into your web browser:

http://www.scfix.net/download/SpyRefresh.bat

This will download the file, save it to your desktop.

XP:

1. Double click SpyRefresh.bat that you just downloaded

2. When you see the cmd prompt (black window with white text) with “Press click to resolve and the False Positive has been resolved.” the replacement is complete. Close this window.

3. Open Management Console and use Click to Resolve. Once all items show Updated/Green. Close the Management Console Window.

4. Delete the SpyRefresh.bat from desktop.

The issue has been resolved.

Vista/7:

1.Right click SpyRefresh.bat that you just downloaded and choose “Run as Administrator”.

2. When you see the cmd prompt (black window with white text) with “Press click to resolve and the False Positive has been resolved.” the replacement is complete. Close this window.

3. Open the SecureIt Management Console and use Click to Resolve. This will update SecureIt. When all items are green, close the Management Console.

4 .Delete the SpyRefresh.bat from desktop .

The issue has been resolved.


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Categories

%d bloggers like this: