a2 (aSquared) spy message

  • Thread starter Thread starter Sanjaya
  • Start date Start date
S

Sanjaya

Downloaded and installed v2.0 of aSquared.

Used the Smart Scan function to run a quick check
of my WinXP laptop.

Besides the usual tracking cookies it identified
nslock15vb6.ocx (in the System32 folder) as spyware...
Trace.File.KeyThief2.0

Google showed the .ocx as being part of a customization
for msn messenger, but I did find reference to it on some
dodgy pages also.

File properties show it was created Aug.2, 2000 and is 100kb.
Activelock by Nelco Software, trademarked by Nelson Ferraz.

A search of activelock found it mentioned at ZDNet India,
saying it's used to protect Visual Basic data, set expiration dates, etc.
http://www.zdnetindia.com/downloads/Windows/info/910914.html

Anyone familiar enough with this .ocx to tell me if I need it?
 
From: "Sanjaya" <[email protected]>

| Downloaded and installed v2.0 of aSquared.
|
| Used the Smart Scan function to run a quick check
| of my WinXP laptop.
|
| Besides the usual tracking cookies it identified
| nslock15vb6.ocx (in the System32 folder) as spyware...
| Trace.File.KeyThief2.0
|
| Google showed the .ocx as being part of a customization
| for msn messenger, but I did find reference to it on some
| dodgy pages also.
|
| File properties show it was created Aug.2, 2000 and is 100kb.
| Activelock by Nelco Software, trademarked by Nelson Ferraz.
|
| A search of activelock found it mentioned at ZDNet India,
| saying it's used to protect Visual Basic data, set expiration dates, etc.
| http://www.zdnetindia.com/downloads/Windows/info/910914.html
|
| Anyone familiar enough with this .ocx to tell me if I need it?
|


Please submit a sample of "nslock15vb6.ocx" to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.

You can also submit a suspect, one at a time, via the following email URL...
mailto:[email protected]?subject=SCAN

When you get the report, please post back the exact results.

This will help determine if it is a False Positive declaration.
 
David H. Lipman said:
Please submit a sample of "nslock15vb6.ocx" to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.

You can also submit a suspect, one at a time, via the following email URL...
mailto:[email protected]?subject=SCAN

When you get the report, please post back the exact results.

This will help determine if it is a False Positive declaration.
Click to expand...

Complete scanning result of "nslock15vb6.ocx", received in VirusTotal at 09.06.2006, 10:28:26 (CET).
All vendors reporting... no virus found.
 
From: "Sanjaya" <[email protected]>


|
| Complete scanning result of "nslock15vb6.ocx", received in VirusTotal at 09.06.2006,
10:28:26
| (CET). All vendors reporting... no virus found.
|

Send them a note that is is a strong belief that this is a False Positive and include the
Virus Total report.
 
David H. Lipman" said:
:


|
| Complete scanning result of "nslock15vb6.ocx", received in VirusTotal at 09.06.2006,
10:28:26
| (CET). All vendors reporting... no virus found.
|

Send them a note that is is a strong belief that this is a False Positive and include the
Virus Total report.
Click to expand...

Thanks for your help Dave.
 
Back
Top