Windows 7 - KIS2011 Reporting ie-spell check 100% dangerous?

It's very like a false positive. It's just that Kaspersky doesn't like unsigned applications. And the fact that it also monitors what you type, kaspersky went over-cautious and threw the warning..
It even once threw a potential risk warning when i was installing SAS. :P

It says right on the picture he linked to it isn't a digitally signed driver.
So it is kicking out a warning.
Windows IE-9 downloader prompted me the file was missing the digital sig and there was a risk.
Nothing else found by MSE, Avast or MBAM.

Here's the email from Kaspersky Labs: (No News Yet, just automated responce.)


Hello,

This message is generated by automatic letter reception system. The report contains information on what the verdicts on the files (if any in the letter) makes antivirus with latest updates. Letter will be passed to the virus analyst.

ie_spellcheck_warning_latestvertoo.jpg,
ieSpellSetup251106.exe,
ieSpellSetup264573.exe

These files are in process.

Best Regards, Kaspersky Lab

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.comhttp://www.viruslist.com


>> From: My Email
>> Sent:>> To: newvirus@kaspersky.com
>> Subject: [VirLabSRF][Malicious program description][M:1][LN:EN][L:0]
>>
>>
>> LANG: en
>> email: My Email
>>
>> description:
>> Hello, I use Windows 7 Pro with Internet Explorer 8 and the add on "IE Spell" Check, on one system it wan"t even being used and KIS2011 reported it as a high risk and a 100% Danger level in its banner.
>>
>> That was version (2.5.1_b_106) This version was already installed on my system, but when I went to re-install it KIS reported with the same pop-up "High Rish, Danger Level 100%) and the latest Version (v2.6.4_b_573).
>>
>> Please look into these two versions, people use this product all the time, I'm concerned for them as well.
>> All I Can say is I don"t feel safe using any version nor
>>
>>
>>
>>
>>
>> uploaded files:
>> IE_SPELLCHECK_WARNING_LatestVerToo.jpg
>> Virus.zip
>> Virus2.zip
-----------

Heres a link to the thread on Kaspersky lab.

IE Spell Install Warning Danger Level 100% - Kaspersky Lab Forum

I still don't know if IE Spell is safe. In the responce she says if I particapated in kaspersky labs feedback, the installer has been OK'ed and there would be no warning. That seems odd. Why, just b/c I don't, did I get the pop-up. There still can be an issue with programs with no digital sig, & KIS 2011 report 100% risk. Risk what, .....b/c not sig.

I dunno..... Yo all might havve to get used 2 seaing some poorly spelled posts. loll

Acuatuly I do think its safe, its just the program designer can't afford ms's cost for a digital sig. Is that right, that digital sigs are only given by ms?

Here is a report on that file:





Interestingly, it shows a negative result for all scanners, including Kaspersky (version 7.0.0.125).

Thanks for the post Dwarf, I'm not sure why Kaspersky version is so old? Its up to (11.0.2.534-currently beta testing, but officially released in Japan), but the truly released version FOR THE US is 11.0.1.400-1419. If you select global, the latest is 11.0.2.556, BUT only for Japanese, otherwise US is the same. That version there showing is from around 2006-7. Typically, the first number is the year released, but they release new versions about 3 months prior to the new year. Not always, sometimes a new version will come out earlier in the new year, but they try to release and have everything worked out buy that new year.

For example right now its called KIS or KAV 2011, but its still 2010, (11.0.1.400-a,b) I would say before the end of the year, for the US we will at least have the 11.0.2.556 (or later, as their still in beta).

But I've gone ahead and re-installed IE Spell. Whata ya gonna do, do I really care that much if they keep what I type or check, ...NO so F-it. Its been around a long time an many people use it.

Thanks again, and I'll be checking into that site you posted from.

This post was Spell checked by "IE SPELL" Checker ver. 2.6.4_b_573. LOL!
____

Added: But I will repost the responce from KAS Lab when I get it, just curious as too what they will say about it.

Please do. Im curious myself.

It likely is as suggested by HopolongX, simply the fact theres no digital signature.
Not so much the file itself is malicious.