Motorola Phone Tool contains Shorty.Gopher adware?

PestPatrol reports that Motorola Phone Tools (specifically
MPT_TEST_info.exe) contains the adware prog Shorty.Gopher

I have version 4.3.6c which may not be the latest.

Anyone else find this?

---

› See More: Motorola Phone Tool contains Shorty.Gopher adware?

"CWatters" <[email protected]> wrote:

> PestPatrol reports that Motorola Phone Tools (specifically
> MPT_TEST_info.exe) contains the adware prog Shorty.Gopher
>
> I have version 4.3.6c which may not be the latest.
>
> Anyone else find this?

No, neither Adaware or Spybot S&D showed it. It could be a false
positive, maybe? Where did you get your copy of MPT?

I'm running a later version, 4.5.1c which is the latest I think.


--
XS11E, Killing all posts from Google Groups
The Usenet Improvement Project: http://blinkynet.net/comp/uip5.html

"XS11E" <[email protected]> wrote in message
news:[email protected]...
> "CWatters" <[email protected]> wrote:
>
> > PestPatrol reports that Motorola Phone Tools (specifically
> > MPT_TEST_info.exe) contains the adware prog Shorty.Gopher
> >
> > I have version 4.3.6c which may not be the latest.
> >
> > Anyone else find this?
>
> No, neither Adaware or Spybot S&D showed it. It could be a false
> positive, maybe? Where did you get your copy of MPT?
>
> I'm running a later version, 4.5.1c which is the latest I think.

Got it from the CD that came with my phone.

Will let it update itself to see what happens.

> "XS11E" <[email protected]> wrote in message
> news:[email protected]...
> > I'm running a later version, 4.5.1c which is the latest I think.

Just updated to 4.5.1c 3/20/2007 and it still finds gofer in
MPT_TEST_info.exe. I don't think that file got updated though because it's
version 3.1.1.0 created 19/04/2007, modified 27/10/2006.

Probably a false positive as Adaware couldn't find it and there are very few
reports on the web (not in english).

"CWatters" <[email protected]> wrote:

> Probably a false positive as Adaware couldn't find it and there
> are very few reports on the web (not in english).

I hope so. Here's what Google found:

http://vil.nai.com/vil/content/v_134868.htm

You can search for these files listed on the webpage:

File name: CATCHER.DLL
MD5Hash: d41b6f5b38b212660caf6f9db7bdc94e

File name: CWEBPAGE.DLL
MD5Hash: 83e8f03547cd088ba087d28b5d70a706

File name: GUI.EXE
MD5Hash: af62ff7f52ea3b7c7ab6a44adca3f079

and these registry keys listed on the webpage:

HKEY_CLASSES_ROOT\CLSID\
{11A4CA8C-A8B9-49c2-A6D3-3F64C9EEBAE6}

HKEY_CLASSES_ROOT\Interface\
{31CA5C07-7F5F-4502-8C77-99A91558ADD0}

HKEY_CLASSES_ROOT\Shorty.Gopher

HKEY_CLASSES_ROOT\Shorty.Gopher.1

HKEY_CLASSES_ROOT\TypeLib\
{223A26D8-9F91-42F6-8ED3-094B637DE020} HKEY_LOCAL_MACHINE\SOFTWARE


If they're not there, it almost HAS to be a false positive I think.

FWIW, I have none of the files or registry keys mentioned in the
article.


--
XS11E, Killing all posts from Google Groups
The Usenet Improvement Project: http://blinkynet.net/comp/uip5.html

"XS11E" <[email protected]> wrote in message
news:[email protected]...
> "CWatters" <[email protected]> wrote:
>
> > Probably a false positive as Adaware couldn't find it and there
> > are very few reports on the web (not in english).
>
> I hope so. Here's what Google found:
>
> http://vil.nai.com/vil/content/v_134868.htm
>
> You can search for these files listed on the webpage:

Thanks for that. Couldn't find any so seems false positive is confirmed.