FALSE POSITIVE? Steganos Security Suite 6 detected as AutoSearch

[Guest]

Hi. I did a scan last night using MS AntiSpyware, and to my horror it
detected AutoSearch in my system. Upon further inspection, I noticed the
culprit seemed to be my copy of Steganos Security Suite 6.

This looks like a false positive to me because I do not encounter any
abnormality in surfing the web using IE.

Thanks!
------------------------------

AutoSearch Browser Modifier
Details: AutoSearch is an Internet Explorer browser helper object that
redirects address bar searches to a specific We site.
Status: Ignored
Severe threat - Severe-risk items have an extreme potential for harm, such
as a security exploit, and should be removed.

Infected registry keys/values detected
HKEY_CLASSES_ROOT\clsid\{00000000-0000-0000-0000-000000000001}
HKEY_CLASSES_ROOT\clsid\{00000000-0000-0000-0000-000000000001}\InprocServer32 c:\program files\steganos security suite 6\sfmse.dll
HKEY_CLASSES_ROOT\clsid\{00000000-0000-0000-0000-000000000001}\InprocServer32 ThreadingModel Apartment
HKEY_CLASSES_ROOT\clsid\{00000000-0000-0000-0000-000000000001} sfmse
HKEY_LOCAL_MACHINE\software\classes\clsid\{00000000-0000-0000-0000-000000000001}
HKEY_LOCAL_MACHINE\software\classes\clsid\{00000000-0000-0000-0000-000000000001}\InprocServer32 c:\program files\steganos security suite 6\sfmse.dll
HKEY_LOCAL_MACHINE\software\classes\clsid\{00000000-0000-0000-0000-000000000001}\InprocServer32 ThreadingModel Apartment
HKEY_LOCAL_MACHINE\software\classes\clsid\{00000000-0000-0000-0000-000000000001} sfmse

 

[Dave M]

Thanks for the report, templar;
Can you report it as a false positive using MSAS Suspected spyware report?
Otherwise, there's my favorite e-mail:
(e-mail address removed)

I'd send c:\program files\steganos security suite 6\sfmse.dll here first
though, to be sure it's clean:

http://virusscan.jotti.org/
http://www.virustotal.com/flash/index_en.html