Page 1 of 2 12 LastLast
Results 1 to 10 of 20

Thread: ZAISS 7 detects Microsoft file CAPICOM.dll as trojan - false positive?

  1. #1
    the_flying_scot Guest

    Default ZAISS 7 detects Microsoft file CAPICOM.dll as trojan - false positive?

    HiI ran a spyware scan today and
    ZAISS 7
    detected the following as a Trojan -
    active item "Win32.Application.adware.WinAntivirus&quo t;, file C:\WINDOWS\System32\capicom.dll .
    I confirmed on my PC that this file is a legitimate Microsoft file (version 2.0.0.3).
    I also confirmed via a web search that it is part of the Microsoft CAPICOM cryptography system used by software developers who create applications using Visual Basic development system, the Visual Basic Scripting Edition or the C++ program language.
    I have NOT quarantined the file, instead I have set ZAISS to
    ignore it (I notice from other posts you can get probs if you Quarantine and then try to release from quarantine, that is the dll file seems to mysteriously disappear).
    So it seems to me
    the latest version of the Anti-spyware engine v 4.9.1.8211, DAT File version 01.200704.1425
    detects a false positive.
    I notice some other posts on this about a week old, but has anyone
    else experienced this with the latest anti-spyware engine update?
    Does anyone know if the ZoneLabs gurus/tech support are aware of this?
    RegardsThe_Flying_Scot

    Operating System:Windows XP Home Edition
    Product Name:ZoneAlarm Internet Security Suite
    Software Version:7.0

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,285

    Default Re: ZAISS 7 detects Microsoft file CAPICOM.dll as trojan - false positive?

    Uuuhm, strange they had it fixed last week...Probably re-introduced it with latest DAT?Please report this false positives to ZAlabs, please include also the link to the MS installer so they can check quickly and fix it.Report it here: http://www.zonealarm.com/store/conte...are_report.jspThanks,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    tupaia Guest

    Default Re: ZAISS 7 detects Microsoft file CAPICOM.dll as trojan - false positive? "IT''S BACK"

    I thought we went through this with ZA last week.
    I'll report this but I am
    getting tired of
    dealing with false positives, and they ultimately reduce
    security because you don't what's real and what's not.

    I've recently experienced
    the capicom "detection", the loopback adapter spysite "detection," and one other false positive that eludes me at the moment.

  4. #4
    the_flying_scot Guest

    Default Re: ZAISS 7 detects Microsoft file CAPICOM.dll as trojan - false positive?

    Hi FaxReported it to Zone Labs as per your reply.
    Thanks for your help
    Regards
    The_Flying_Scot

  5. #5
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,285

    Default Re: ZAISS 7 detects Microsoft file CAPICOM.dll as trojan - false positive? "IT''S BACK"

    Hi!False positives can happen... the best is to report to ZA.Posted the link in the previous link.Thanks,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  6. #6
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,285

    Default Re: ZAISS 7 detects Microsoft file CAPICOM.dll as trojan - false positive?

    Hi!you're very welcome...Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  7. #7
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,285

    Default Re: ZAISS 7 detects Microsoft file CAPICOM.dll as trojan - false positive? "IT''S BACK"

    Hi!I have capicom.dll in my system32 and its version 2,0,0,3 but the spyware scan does not detect it...What is your ZA version? And antipyware engine version?ZoneAlarm Security Suite version:7.0.337.000
    TrueVector version:7.0.337.000
    Driver version:7.0.337.000
    Anti-virus engine version:3
    Anti-spyware engine version:5.0.162.0
    Anti-spyware signature DAT file version:01.200704.1425
    AntiSpam version:4.9.1.8211Cheers,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  8. #8
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,285

    Default Re: ZAISS 7 detects Microsoft file CAPICOM.dll as trojan - false positive?

    Hi!I have just double checked and run a scan and my capicom (same version as yours) is not detected.Are we sure its a legit file? May be your ZA is mulfunctioning?ZoneAlarm Security Suite version:7.0.337.000
    TrueVector version:7.0.337.000
    Driver version:7.0.337.000
    Anti-virus engine version:3
    Anti-spyware engine version:5.0.162.0
    Anti-spyware signature DAT file version:01.200704.1425
    AntiSpam version:4.9.1.8211Cheers,FaxEDIT:Info on my capicom.dll<TABLE cellSpacing=0 cellPadding=0 width="100%" border=0><TBODY><TR><TD>File size: 466944 bytes</TD></TR><TR><TD>MD5: 1b6e2050abbda860f4f9f245d1e150a5</TD></TR><TR><TD>SHA1: c854d534de9128b7bb7792a12f31f4ea8c1fdfd4</TD></TR><TR><TD></TD></TR></TBODY></TABLE>

    Message Edited by fax on 04-20-2007 06:18 AM

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  9. #9
    tupaia Guest

    Default Re: ZAISS 7 detects Microsoft file CAPICOM.dll as trojan - false positive? "IT''S BACK"

    The false positive detected last week was 2.0.0.3.
    When I &quot;reinstalled&quot; capicom, I downloaded the latest version -- 2.1.0.1.
    The DAT file is the same as yours.



  10. #10
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,285

    Default Re: ZAISS 7 detects Microsoft file CAPICOM.dll as trojan - false positive? "IT''S BACK"

    Ok, you are on 2.1.0.1I will check this now... the time to find it on microsoft servers....The other user mentioned 2.0.0.3 however...Very strangeFax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •