Spyware Doctor reports that K-meleon's setdefault.exe is "spyware". Can anyone confirm this?

I think that the Doctor has drunk too much ...

A+

---

Mozilla/5.0 (x11; U; Linux x86_64; fr-FR; rv:38.0) Gecko/20100101 Ubuntu/12.04 K-Meleon/76.0

---

Web: http://jujuland.pagesperso-orange.fr/
Mail : alain [dot] aupeix [at] wanadoo [dot] fr

---

Ubuntu 12.04 - Gramps 3.4.9 - Harbour 3.2.0 - Hwgui 2.20-3 - K-Meleon 76.0 rc

---

K-Melon is and contains no spyware. It is an open source project - You can check the code!

I confirm that it is a false positive if it is the exe installed with K-Meleon.

False positives happen sometimes - do not worry if it is K-Meleon's setdefault.

BTW. If You still feel insecure delete or rename setdefault.exe - it is used to make K-Meleon default browser and to register K-Meleon as default handler for certain protocols - You can also do this by hand. To do its job setdefault writes to the registry.

p. s. alain has worked on SetDefault



Edited 1 time(s). Last edit at 06/23/2007 06:31PM by guenter.

Its always wise to use more than one scanner to help eliminate false positives and cover anything that one might miss

hi
i use SD and never had the problem you tel
hope this helps

Sorry, actually it was not SD, but another one, whose name I can't remember right now. However, I'll come back with it as soon as I can.

Nonetheless, maybe you guys should take an interest in taking a look at this also:

http://www.virustotal.com/resultado.html?2d5207f644a4a142b3305c623d28adc7

As said on this page, SetDefault is packed by UPX. The version of SetDefault given with K-Meleon 1.1 isn't packed by UPX, but with internal NSIS zipper.

Can you give the version of Setdefault (generaly on the first screen, or by right-clicking on the exe and reading Properties.

A+

---

Mozilla/5.0 (x11; U; Linux x86_64; fr-FR; rv:38.0) Gecko/20100101 Ubuntu/12.04 K-Meleon/76.0

---

Web: http://jujuland.pagesperso-orange.fr/
Mail : alain [dot] aupeix [at] wanadoo [dot] fr

---

Ubuntu 12.04 - Gramps 3.4.9 - Harbour 3.2.0 - Hwgui 2.20-3 - K-Meleon 76.0 rc

---

It's version 1.3.1.1

Can you try 1.3.1.2 which is packaged with K-Meleon 1.1?

A+

---

Mozilla/5.0 (x11; U; Linux x86_64; fr-FR; rv:38.0) Gecko/20100101 Ubuntu/12.04 K-Meleon/76.0

---

Web: http://jujuland.pagesperso-orange.fr/
Mail : alain [dot] aupeix [at] wanadoo [dot] fr

---

Ubuntu 12.04 - Gramps 3.4.9 - Harbour 3.2.0 - Hwgui 2.20-3 - K-Meleon 76.0 rc

---

Well, I am using K-Meleon 1.1, whose archive was supposed to hold version 1.3.1.2, but actually it contains version 1.3.1.1. Weird...

Now I remember it was Agnitum Antispyware module that reported it as spyware.

Okay, I've just uploded version 1.3.1.2. The scan is under way. Here it is the link:

http://www.virustotal.com/resultado.html?91ee7c8683688cc17a0fda4bd9e86ca9

ACM

As it seems, SetDefault version 1.3.1.2 is "clean". Anyway, you guys who prefer not to use this file have an alternative here:

http://www.freewarefiles.com/program_5_51_33993.html

This is just a suggestion. I am in no related to the software pointed out above.

How anything else if not "clean" - alain (jujuland) is the file's maintainer;
That is why he said "the doc is drunk". That was first hand info

"Trojan horse ruledor.c - unknown manufacturer - dangerous"

That's the message for K-Meleon loader i get when checking Startup Manager.

Very curious, now the loader ...

Is-it XP or Vista ?

A+

---

Mozilla/5.0 (x11; U; Linux x86_64; fr-FR; rv:38.0) Gecko/20100101 Ubuntu/12.04 K-Meleon/76.0

---

Web: http://jujuland.pagesperso-orange.fr/
Mail : alain [dot] aupeix [at] wanadoo [dot] fr

---

Ubuntu 12.04 - Gramps 3.4.9 - Harbour 3.2.0 - Hwgui 2.20-3 - K-Meleon 76.0 rc

---

The Startup Manager is drunk too :p

p. s. SetDefault places a program in autostart, and adds things to registry.
That are actions typically performed by a "Trojan". A heuristic search that does not know K-Meleon's Setdefault can produce a false positive simply for that reason.

It is the obligation of the Anti Viral Software to prevent such false postives - so ppl affected by these false positives should not bug K-Meleon forum but their Anti Virus provider. As easy as that.

Shouldn't some of the devs mail these people to ask them to remove us from the black list?

Doesn't any of you old chaps have a "feeling" that K-Meleon takes screenshots of the user Desktop and browsing "habits" and send it somewhere out over the web? Sorry, I do and I have a strong factual reason for this, which I won't reveal nor give details about. I love this browser and sure prefer this eventually proves not to be true.

Perhaps if you expanded on the "strong factual reason" those in the powers that be could investigate.

IMHO our devs do everthing to make K-Meleon as tight mouthed and secure as possible.
But the possibilties of server side gethering of info are big - bigger than most of us think.