Ad-aware and Disk Watchman

Author Message
Roslyn 03/29/2006 07:01 am
Just a heads up that the latest excellent Ad-aware http://www.lavasoft.nu/index.html wrongly identifies DW.COM as a possible memory resident nasty <g>

Until Lavasoft do a fix in the next Ad-aware update it may be worth warning Disk Watchman users to tick the option in Ad-aware to add DW.COM to the Exclude list. Lavasoft are hard at work on a major upgrade to version 2 so it may be worth adding your own friendly notification to mine to ensure a suitable fix is incorporated.


Roslyn

Alexander 03/29/2006 07:01 am
Dear Roslyn,

Thank you for your message. It seems that you mean the DW.EXE file.
I downloaded the latest Ad-aware version with update but it doesn`t find DW.EXE as a adware component.
Could you please write us your DW and Ad-aware version numbers?
Thank you!

Sincerely,
Alexander.
| Alexander Bednyakov
| Senior Developer
| MetaProducts Corporation
Roslyn 03/29/2006 07:01 am
> Could you please write us your DW and Ad-aware version numbers?
> Thank you!

OK latest versions as listed on sites DW.EXE 1.2.75
Ad-Aware 5.83 Build 2.930 Sigfile 042-24.09.2002
(also picked up with 029-15.06.2002)

Tried both AAW 5.83 and 5.83 Plus no difference.

Enclosed Ad-Aware logfile - note item #32

Using WinXP home Sp1

Roslyn.


Scan initialized on 25/12/2002 19:05:41.
(AAW release 5.83 Plus, referencefile 042-24.09.2002)
======================================================


Started memory scan
====================
Running processes:

#:1 : smss.exe

#:2 : winlogon.exe

#:3 : services.exe

#:4 : lsass.exe

#:5 : svchost.exe

#:6 : svchost.exe

#:7 : spoolsv.exe

#:8 : mlsrvnt.exe

#:9 : named.exe

#:10 : slserv.exe

#:11 : spidernt.exe

#:12 : upsd.exe

#:13 : vsmon.exe

#:14 : mspmspsv.exe

#:15 : explorer.exe

#:16 : so.exe

#:17 : boclean.exe

#:18 : gsicon.exe

#:19 : dslagent.exe

#:20 : atiptaxx.exe

#:21 : bocsec.exe

#:22 : dumeter.exe

#:23 : hpztsb04.exe

#:24 : type32.exe

#:25 : desktool.exe

#:26 : mups.exe

#:27 : proxomitron.exe

#:28 : zapro.exe

#:29 : ietsr.exe

#:30 : iexplore.exe

#:31 : emeditor.exe

#:32 : dw.exe
Warning! DOWNLOADWARE module loaded: dw.exe (D:\DiskTool\Disk Watchman\DW.exe)

"dw.exe" unload successfull!

#:33 : ad-aware.exe

Memory scan result:
Total modules found:33
Suspicious modules found:1



Scanning finished
==================
Suspicious modules found:1
Suspicious keys found : 0
Suspicious folders found:0
Suspicious files found:0
=========================
Components ignored:0
Total components found:1

Alexander 03/29/2006 07:01 am
...
> #:31 : emeditor.exe
>
> #:32 : dw.exe
> Warning! DOWNLOADWARE module loaded: dw.exe (D:\DiskTool\Disk Watchman\DW.exe)
>
> "dw.exe" unload successfull!
>
> #:33 : ad-aware.exe

Heh... It seems that they use the DownloadWare abbreviation (DW) to detect this item...
No size or date comparison. Fine! They don`t care about false matches.

Thank you for your message.

Sincerely,
Alexander.


Roslyn 03/29/2006 07:01 am
> Heh... It seems that they use the DownloadWare abbreviation (DW) to detect this item...
> No size or date comparison. Fine! They don`t care about false matches.


Ahh! Found reference to the real spyware item dw.exe. Geez nowdays all these search programs
should be using Hash compare at least.


http://www.winpatrol.com/stats.html item 3

Roslyn
Alexander 03/29/2006 07:01 am
Dear Roslyn,

Thank you for your message. I wrote an e-mail to them to ask any possible way to fix this problem.
In the meantime, I think that we need to change the name of Disk Watchman executable file for the next version.

Thanks,
Alexander.
Roslyn 03/29/2006 07:01 am
> Alexander.

I see the site page above has been modified with a Disk Watchman safe note


Roslyn