Warning: Spyerase intentionally erases BugHunter from your machine

[pcbutts1]

More false positives Dustin. You really should test your program before you
put it out there. Spyerase has no false positives.

Log file opened: 17:33:34 - 01-28-2007
BugHunter v2.1 using database date/time 01-28-2007|17:50:08
Using configuration file: BUGHUNT.INI

=> Nfo: Recursive scanning is enabled.
=> Nfo: BugHunter is only logging found malware...
Action taken, and result.

C:\PROGRA~1\NPSOFT~1\WTR-WE~1\ICSHAR~1.DLL - Full Match! 1:1264 - Scanning
Only
C:\WINDOWS\INSTAL~1\{B510A~1\NEWSHO~1.EXE - Malicious JavaScript 2:443 -
Scannin

Complete scanning result of "ICSharpCode.SharpZipLib.dll", received in
VirusTotal at 01.29.2007, 03:18:41 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.32 01.27.2007 no virus found
Authentium 4.93.8 01.26.2007 no virus found
Avast 4.7.936.0 01.29.2007 no virus found
AVG 386 01.28.2007 no virus found
BitDefender 7.2 01.29.2007 no virus found
CAT-QuickHeal 9.00 01.27.2007 no virus found
ClamAV devel-20060426 01.28.2007 no virus found
DrWeb 4.33 01.29.2007 no virus found
eSafe 7.0.14.0 01.28.2007 no virus found
eTrust-InoculateIT 23.73.127 01.29.2007 no virus found
eTrust-Vet 30.3.3353 01.27.2007 no virus found
Ewido 4.0 01.28.2007 no virus found
Fortinet 2.85.0.0 01.28.2007 no virus found
F-Prot 4.2.1.29 01.26.2007 W32/ZlobX.GCO
Ikarus T3.1.0.27 01.28.2007 no virus found
Kaspersky 4.0.2.24 01.29.2007 no virus found
McAfee 4950 01.26.2007 no virus found
Microsoft 1.2101 01.29.2007 no virus found
NOD32v2 2015 01.29.2007 no virus found
Norman 5.80.02 01.26.2007 no virus found
Panda 9.0.0.4 01.28.2007 no virus found
Prevx1 V2 01.29.2007 no virus found
Sophos 4.13.0 01.28.2007 no virus found
Sunbelt 2.2.907.0 01.26.2007 no virus found
TheHacker 6.0.3.159 01.28.2007 no virus found
UNA 1.83 01.26.2007 no virus found
VBA32 3.11.2 01.28.2007 no virus found
VirusBuster 4.3.19:9 01.28.2007 no virus found


Aditional Information
File size: 122880 bytes
MD5: 555a3998407435703f9c14350a929846
SHA1: 34893912cb60a1dbdb3b50d1205902769acbfcca

Complete scanning result of "NewShortcut1.exe", received in VirusTotal at
01.29.2007, 03:31:59 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.32 01.27.2007 no virus found
Authentium 4.93.8 01.26.2007 no virus found
Avast 4.7.936.0 01.29.2007 no virus found
AVG 386 01.28.2007 no virus found
BitDefender 7.2 01.29.2007 no virus found
CAT-QuickHeal 9.00 01.27.2007 no virus found
ClamAV devel-20060426 01.28.2007 no virus found
DrWeb 4.33 01.29.2007 no virus found
eSafe 7.0.14.0 01.28.2007 no virus found
eTrust-InoculateIT 23.73.127 01.29.2007 no virus found
eTrust-Vet 30.3.3353 01.27.2007 no virus found
Ewido 4.0 01.28.2007 no virus found
Fortinet 2.85.0.0 01.28.2007 no virus found
F-Prot 4.2.1.29 01.26.2007 no virus found
Ikarus T3.1.0.27 01.28.2007 no virus found
Kaspersky 4.0.2.24 01.29.2007 no virus found
McAfee 4950 01.26.2007 no virus found
Microsoft 1.2101 01.29.2007 no virus found
NOD32v2 2015 01.29.2007 no virus found
Norman 5.80.02 01.26.2007 no virus found
Panda 9.0.0.4 01.28.2007 no virus found
Prevx1 V2 01.29.2007 no virus found
Sophos 4.13.0 01.28.2007 no virus found
Sunbelt 2.2.907.0 01.26.2007 no virus found
TheHacker 6.0.3.159 01.28.2007 no virus found
UNA 1.83 01.26.2007 no virus found
VBA32 3.11.2 01.29.2007 no virus found
VirusBuster 4.3.19:9 01.28.2007 no virus found


Aditional Information
File size: 49152 bytes
MD5: b164396de25f846452e9a4f7cc17a5fc
SHA1: 2d5207fc361572158c86f176c8ec14c0864441ae


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"Dustin Cook" <spamfilterineffect.see.sig@nowhere.com> wrote in message
news:Xns98C6CBD2E8E8HHI2948AJD832@69.28.186.121...
> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in
> news:9cSdnXe5IvEBhiDYnZ2dnUVZ_uCdnZ2d@giganews.com :
>
>
> I suppose you didn't read my post to well. I said I'd check into my legal
> options regarding your actions against my software. That's all.
>
> BugHunter now scans for over 5000 malware executables, and warns people
> about you. Nice huh?
>
>
> --
> Dustin Cook
> Author of BugHunter - MalWare Removal Tool - V2.1
> web: http://bughunter.it-mate.co.uk
> email: bughunter.dustin@gmail.com.removethis
> Last updated: January 28th, 2007

[Dustin Cook]

"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in news:eI-
dna2eF7gBwiDYnZ2dnUVZ_qidnZ2d@giganews.com:

> W32/ZlobX.GCO

Tsk... Pc Butts, F-prot also considers the file bad. Want to email them so
I can see for sure?

Considering the application has signatures for over 5,000 programs, it's
entirely possible for it to mistake an innocent file for a bad one.

False alarms are a part of life with signature based detection technology.
Of course I wouldn't expect you to know anything about this, since your
script doesn't make use of signatured detection.

As for false alarms, Pcbutts, you don't actually know first hand if it does
or not. If the original authors deliberatly sabotaged a version in the
hopes you'd steal it, you'd introduce whatever bugs and intentional
failures they installed. Why is this? Because spyerase isn't yours, and you
can't read code. be it script, assembly or another form of text.




--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - V2.1
web: http://bughunter.it-mate.co.uk
email: bughunter.dustin@gmail.com.removethis
Last updated: January 28th, 2007

[Dustin Cook]

"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in
news:eI-dna2eF7gBwiDYnZ2dnUVZ_qidnZ2d@giganews.com:

> More false positives Dustin. You really should test your program
> before you put it out there. Spyerase has no false positives.
>
> Log file opened: 17:33:34 - 01-28-2007
> BugHunter v2.1 using database date/time 01-28-2007|17:50:08
> Using configuration file: BUGHUNT.INI
>
> => Nfo: Recursive scanning is enabled.
> => Nfo: BugHunter is only logging found malware...
> Action taken, and result.
>
> C:\PROGRA~1\NPSOFT~1\WTR-WE~1\ICSHAR~1.DLL - Full Match! 1:1264 -
> Scanning Only
> C:\WINDOWS\INSTAL~1\{B510A~1\NEWSHO~1.EXE - Malicious JavaScript 2:443
> - Scannin
>
> Complete scanning result of "ICSharpCode.SharpZipLib.dll", received in
> VirusTotal at 01.29.2007, 03:18:41 (CET).
>
> Antivirus Version Update Result
> AntiVir 7.3.0.32 01.27.2007 no virus found
> Authentium 4.93.8 01.26.2007 no virus found
> Avast 4.7.936.0 01.29.2007 no virus found
> AVG 386 01.28.2007 no virus found
> BitDefender 7.2 01.29.2007 no virus found
> CAT-QuickHeal 9.00 01.27.2007 no virus found
> ClamAV devel-20060426 01.28.2007 no virus found
> DrWeb 4.33 01.29.2007 no virus found
> eSafe 7.0.14.0 01.28.2007 no virus found
> eTrust-InoculateIT 23.73.127 01.29.2007 no virus found
> eTrust-Vet 30.3.3353 01.27.2007 no virus found
> Ewido 4.0 01.28.2007 no virus found
> Fortinet 2.85.0.0 01.28.2007 no virus found
> F-Prot 4.2.1.29 01.26.2007 W32/ZlobX.GCO
> Ikarus T3.1.0.27 01.28.2007 no virus found
> Kaspersky 4.0.2.24 01.29.2007 no virus found
> McAfee 4950 01.26.2007 no virus found
> Microsoft 1.2101 01.29.2007 no virus found
> NOD32v2 2015 01.29.2007 no virus found
> Norman 5.80.02 01.26.2007 no virus found
> Panda 9.0.0.4 01.28.2007 no virus found
> Prevx1 V2 01.29.2007 no virus found
> Sophos 4.13.0 01.28.2007 no virus found
> Sunbelt 2.2.907.0 01.26.2007 no virus found
> TheHacker 6.0.3.159 01.28.2007 no virus found
> UNA 1.83 01.26.2007 no virus found
> VBA32 3.11.2 01.28.2007 no virus found
> VirusBuster 4.3.19:9 01.28.2007 no virus found
>
>
> Aditional Information
> File size: 122880 bytes
> MD5: 555a3998407435703f9c14350a929846
> SHA1: 34893912cb60a1dbdb3b50d1205902769acbfcca

F-prot considers it a zlob variant, BugHunter doesn't have an id string
for that record yet. You'd have to send me the file so I can see it. It's
apparently in the first signature file anyways...

> Complete scanning result of "NewShortcut1.exe", received in VirusTotal
> at 01.29.2007, 03:31:59 (CET).
>
> Antivirus Version Update Result
> AntiVir 7.3.0.32 01.27.2007 no virus found
> Authentium 4.93.8 01.26.2007 no virus found
> Avast 4.7.936.0 01.29.2007 no virus found
> AVG 386 01.28.2007 no virus found
> BitDefender 7.2 01.29.2007 no virus found
> CAT-QuickHeal 9.00 01.27.2007 no virus found
> ClamAV devel-20060426 01.28.2007 no virus found
> DrWeb 4.33 01.29.2007 no virus found
> eSafe 7.0.14.0 01.28.2007 no virus found
> eTrust-InoculateIT 23.73.127 01.29.2007 no virus found
> eTrust-Vet 30.3.3353 01.27.2007 no virus found
> Ewido 4.0 01.28.2007 no virus found
> Fortinet 2.85.0.0 01.28.2007 no virus found
> F-Prot 4.2.1.29 01.26.2007 no virus found
> Ikarus T3.1.0.27 01.28.2007 no virus found
> Kaspersky 4.0.2.24 01.29.2007 no virus found
> McAfee 4950 01.26.2007 no virus found
> Microsoft 1.2101 01.29.2007 no virus found
> NOD32v2 2015 01.29.2007 no virus found
> Norman 5.80.02 01.26.2007 no virus found
> Panda 9.0.0.4 01.28.2007 no virus found
> Prevx1 V2 01.29.2007 no virus found
> Sophos 4.13.0 01.28.2007 no virus found
> Sunbelt 2.2.907.0 01.26.2007 no virus found
> TheHacker 6.0.3.159 01.28.2007 no virus found
> UNA 1.83 01.26.2007 no virus found
> VBA32 3.11.2 01.29.2007 no virus found
> VirusBuster 4.3.19:9 01.28.2007 no virus found
>
>
> Aditional Information
> File size: 49152 bytes
> MD5: b164396de25f846452e9a4f7cc17a5fc
> SHA1: 2d5207fc361572158c86f176c8ec14c0864441ae

Hmm... The JavaScript scanning routine usually doesn't have false alarms,
although it could be the wrong ID string for that hit. Once again, I'd
need to see the file.


By the way, Not that this matters to a person who misleads people, steals
code, and deletes legitimate programs without warning his users he's
doing so, threatens to automatically delete other vendor(s) applications
if they don't keep quiet, but you do realize, the problems you've
reported are not "bugs" in the program? They might be false alarms, and
reside in the signature files, not in the executable.

Please learn the difference.

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - V2.1
web: http://bughunter.it-mate.co.uk
email: bughunter.dustin@gmail.com.removethis
Last updated: January 28th, 2007