KIS2011 Reporting ie-spell check 100% dangerous?

[OEM]

Hello,

I have three PC's at home here and all have Kaspersky 2011 Internet security installed on all of them. Also installed on them is "IE spell checker" and one PC KIS had a pop-up Warning that "ie-spell check" was 100% Dangerous and was asking me to either allow, allow once, or block. The version is "251_b_106". Its installed on all PC's, but no warnings on the others which is weird b/c they have the same version and protecton.

Anyhoo, if you have that version, their is a newer one that hope has a low risk level. KIS said the older one was a 100% risk, ...It doesn't get any worse, specially with a program looking at what you type.

My advice is to update to latest version "v2.6.4_build 573" if you have version "251_build_106" Un-Install the old version first from control panel "UN-install programs"

Why take a chance, but its so strange that with the same Internet Security, It warned me only on one machine, when that older version od ie-spell is Installed on all threeSystems.
----
EDIT: Kaspersky reports same warning for ie spell's latest version so I've removed the link. Users of IE Spell should be on alert until this resolved. I will be posting over on Kaspersky form about this, but it sometimes takes awhile for a responce b/c they want to make sure.
------
Go to this post and see Kaspersky's warning when attempting to install latest version:
http://www.sevenforums.com/1059670-post7.html

Anybody else get a warning about ie-spell check ?

 

[zigzag3143]

Hey T

Nope, I havent even opened IE yet on Win 7 (firefox).

Thanks for the info


K

 

[Jacee]

I haven't, but I use IE 7Pro IE7Pro Freeware - free software download and software review - add features to IE7 from SnapFiles
LicenseFreewareWindows2000/XP/Vista/7

IE7Pro adds a variety of useful features to Internet Explorer 7, that are accessible from a newly added icon in the IE status bar. They include a spell checker for online forms

and Avira Premium Security Suite.

 

[OEM]

I haven't, but I use IE 7Pro IE7Pro Freeware - free software download and software review - add features to IE7 from SnapFiles
LicenseFreewareWindows2000/XP/Vista/7

IE7Pro adds a variety of useful features to Internet Explorer 7, that are accessible from a newly added icon in the IE status bar. They include a spell checker for online forms

and Avira Premium Security Suite.

Un-Install ie-spell, downloading and installing IE7Pro

Might also go back to firefox as well.

 

[Capt.Jack Sparrow]

I use ie-spell check. I have Avast Pro no issues so far.

 

[Tews]

Bleh, I dont kneed noe steeenkin spel chek!! :roflmao:

 

[OEM]

Just went to install the latest version and KIS2011 said the same thing. I can't trust ie-spell anymore, unless Kaspersky is getting it wrong. This is what I got while installing the latest version of ie-spell:

View attachment 111446

I reccomend either a much older version, use Jacee suggestion of "IE 7Pro", or go with Zig and drop Internet Explorer altogether for Firefox.

I've used firefox many times in the past and for long periods of time, its just when I do a reinstall I get used to using ie before I get around to installing firefox.

This is unreal, I have to think Kaspersky is getting it wrong, but I aint chancing it.

SO DON"T INSTALL THE LATEST VERSION EITHER UNTIL THIS GETS RESOLVED.

Its not worth the risk with a program that works in concert of your typing, ...I say its a no go!

 

[Wishmaster]

Its possible its a false positive.



I didn't install it, but I did download it and start the installer.
Norton seemed fine with it, for what its worth.

So thats 2 that think its OK.


Still, false positive or not, I can understand where some concern may be.
Wonder what it is about it Kaspersky doesn't like...

 

[OEM]

I use ie-spell check. I have Avast Pro no issues so far.

It may work fine, but be doing some dasterly things like keyloging or just reporting back what ever gets spell checked. ....dunno, just know KIS popped up warming about both versions on 2 machines. Submited the encripted files to them for review. Should here something by tomorrow.

 

[marsmimar]

It may work fine, but be doing some dasterly things like keyloging or just reporting back what ever gets spell checked. ....dunno, just know KIS popped up warming about both versions on 2 machines. Submited the encripted files to them for review. Should here something by tomorrow.

Strange... no other security program finds any issues with ieSpell. I checked it with MSE... no issues.

View attachment 111479

Even the download links for ieSpell are from reputable mirror sites like CNET, Major Geeks, ands SnapFiles. They run their own security checks before offering apps for download. Their reputations would be immeasurably hurt if they offered spyware, keyloggers, etc to an unsuspecting public.

Be interesting to see what Kaspersky has to say about this.

 

[EzioAuditore]

It's very like a false positive. It's just that Kaspersky doesn't like unsigned applications. And the fact that it also monitors what you type, kaspersky went over-cautious and threw the warning..
It even once threw a potential risk warning when i was installing SAS.

 

[Hopalong X]

It says right on the picture he linked to it isn't a digitally signed driver.
So it is kicking out a warning.
Windows IE-9 downloader prompted me the file was missing the digital sig and there was a risk.
Nothing else found by MSE, Avast or MBAM.

 

[OEM]

Here's the email from Kaspersky Labs: (No News Yet, just automated responce.)


Hello,

This message is generated by automatic letter reception system. The report contains information on what the verdicts on the files (if any in the letter) makes antivirus with latest updates. Letter will be passed to the virus analyst.

ie_spellcheck_warning_latestvertoo.jpg,
ieSpellSetup251106.exe,
ieSpellSetup264573.exe

These files are in process.

Best Regards, Kaspersky Lab

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.comhttp://www.viruslist.com


>> From: My Email
>> Sent:>> To: [email protected]
>> Subject: [VirLabSRF][Malicious program description][M:1][LN:EN][L:0]
>>
>>
>> LANG: en
>> email: My Email
>>
>> description:
>> Hello, I use Windows 7 Pro with Internet Explorer 8 and the add on "IE Spell" Check, on one system it wan"t even being used and KIS2011 reported it as a high risk and a 100% Danger level in its banner.
>>
>> That was version (2.5.1_b_106) This version was already installed on my system, but when I went to re-install it KIS reported with the same pop-up "High Rish, Danger Level 100%) and the latest Version (v2.6.4_b_573).
>>
>> Please look into these two versions, people use this product all the time, I'm concerned for them as well.
>> All I Can say is I don"t feel safe using any version nor
>>
>>
>>
>>
>>
>> uploaded files:
>> IE_SPELLCHECK_WARNING_LatestVerToo.jpg
>> Virus.zip
>> Virus2.zip
-----------

Heres a link to the thread on Kaspersky lab.

IE Spell Install Warning Danger Level 100% - Kaspersky Lab Forum

I still don't know if IE Spell is safe. In the responce she says if I particapated in kaspersky labs feedback, the installer has been OK'ed and there would be no warning. That seems odd. Why, just b/c I don't, did I get the pop-up. There still can be an issue with programs with no digital sig, & KIS 2011 report 100% risk. Risk what, .....b/c not sig.

I dunno..... Yo all might havve to get used 2 seaing some poorly spelled posts. loll

Acuatuly I do think its safe, its just the program designer can't afford ms's cost for a digital sig. Is that right, that digital sigs are only given by ms?

 

[Dwarf]

Here is a report on that file:





Interestingly, it shows a negative result for all scanners, including Kaspersky (version 7.0.0.125).

 

[OEM]

Here is a report on that file:

View attachment 111792

View attachment 111793 View attachment 111794

Interestingly, it shows a negative result for all scanners, including Kaspersky (version 7.0.0.125).

Thanks for the post Dwarf, I'm not sure why Kaspersky version is so old? Its up to (11.0.2.534-currently beta testing, but officially released in Japan), but the truly released version FOR THE US is 11.0.1.400-1419. If you select global, the latest is 11.0.2.556, BUT only for Japanese, otherwise US is the same. That version there showing is from around 2006-7. Typically, the first number is the year released, but they release new versions about 3 months prior to the new year. Not always, sometimes a new version will come out earlier in the new year, but they try to release and have everything worked out buy that new year.

For example right now its called KIS or KAV 2011, but its still 2010, (11.0.1.400-a,b) I would say before the end of the year, for the US we will at least have the 11.0.2.556 (or later, as their still in beta).

But I've gone ahead and re-installed IE Spell. Whata ya gonna do, do I really care that much if they keep what I type or check, ...NO so F-it. Its been around a long time an many people use it.

Thanks again, and I'll be checking into that site you posted from.

This post was Spell checked by "IE SPELL" Checker ver. 2.6.4_b_573. :devil: LOL!
____

Added: But I will repost the responce from KAS Lab when I get it, just curious as too what they will say about it.

 

[Wishmaster]

But I will repost the responce from KAS Lab when I get it, just curious as too what they will say about it.

Please do. Im curious myself.

It likely is as suggested by HopolongX, simply the fact theres no digital signature.
Not so much the file itself is malicious.