sunilj
24th August 2007 01:01 UTC

Spyware Doctor Alert during Install
Hello,

I am a developer at a Startup. We develop a browser extension with sidebar and our product is packaged using NullSoft installer. During the installation of our product, we are noticing that Spyware Doctor is alerting the user with threat name : Adware.Maxifiles. This alert is happening during kernel32::CreateMutexA call and subsequent release. Our product does not include any kind of Adware or Spyware.

I am interested to know what is causing this warning message and to find a way to stop this warning message. Any help provided would be greatly appreciated. Thanks.

Sunil

Joel
24th August 2007 05:12 UTC

Try to create a dummy installer that uses kernel32::CreateMutexA, let's see if Spyware Doctors detects it, the 3rd party launch code.

sunilj
24th August 2007 07:38 UTC

I can still see the problem using the below code.


; You can get help from the dll itself by calling it with a ? like example below.
; This plugin will prevent multiple instances of your program running at once.

OutFile "MutexCheck.exe"


Function .onInit
System::Call 'kernel32::CreateMutexA(i 0, i 0, t "myMutex") i .r1 ?e'
Pop $R0
StrCmp $0 0 +3
MessageBox MB_OK "The installer is already running."
Abort
FunctionEnd

Section "MainSection"
SectionEnd

kichik
24th August 2007 08:23 UTC

Then it's a false positive by Spyware Doctor and should be reported to them so they can fix it.