Thursday, May 22, 2008

Windows XP SP3 triggers false positive in Spyware Doctor

If you recently upgrade your Windows XP installation into SP3 and you have Spyware Doctor running, you will gonna get into a problem. Spyware Doctor from Pc Tools detects Trojan-Spy.Pophot.WX in RunDLL32.exe even if the system is uninfected. RunDLL32.exe is a system file that Windows uses to run code in DLL files so this Window file is important in your day-to-day PC use.

You will find yourself in an endless loop of scanning to remove the file, rebooting your computer, and then finding the file again. If you are in this situation, you can do this workaround:

1. In the Spyware Doctor window, click the Settings button on the left.
2. Click Global Action List to the right of that.
3. At the bottom, click Add.
4. In the New Rule dialog box, choose "File on disk" from the "Select data type" drop-down list.
5. To the right of the text box below, click the ... button to browse for a file. Locate and select RunDLL32.exe in the Windows\System32 folder.
6. Make sure "Always allow" is selected in the drop-down list at the bottom and click the Add button.

No comments:

Post a Comment