SpoolLib.dll Adware

Every time I start Internet Explorer (6.0 for Windows XP SP2), I get an Adware Alert in the spoollib.dll file under Windows/System32 folder. The problem is that I don’t care if there is adware in the file, and I want to stop the message from coming up. The two ways I thought of stopping my problem is either one of the following, both of which would solve my problem and make me content:

  1. Access an exclusions setting for the resident scanner, in which I could put spoollib.dll

  2. Disable Avast!'s scanning for adware

If anyone has any advice on how to reach either option, I would be very appreciative. Thanks infinitely in advance,

Demon0

Are you sure you want to keep it see this page http://www.spywaredata.com/spyware/malware/spoollib.dll.php

I feel ignorant for not looking up the file. Sorry about that. However, I ran CWShredder and it found no CoolWebSearch on my system. (this is the latest updated version of CWShredder too). I also ran the latest updated version of AdAware on my system32 directory (to save time), and it found did not count spoollib as adware. (I know it actually did scan the file, because when I scanned the first time Avast popped up the similar on-access message about the Adware, but then I turned off the resident scanner and did the AdAware scan again.)

Hi demon0,

There’s a difference between not caring if you have adware and being annoyed by a possible false positive.

If you upload the questionable file to avast! for review we can all benefit if it truly is a false positive that is removed. If its not a false positive then you can either deal with it or add it to the exclusions as you see fit. At least you will make an informed decision in this case.

If you’re willing to help there are instructions for uploading a sample here

http://forum.avast.com/index.php?board=2;action=display;threadid=7779

M

I will upload it when I get a chance; I want to do everything I can to help the community.

Regardless, I still do not understand how to exclude things from the Resident Scanner. Like I stated in my first post, I added it to the Exclusions under Settings in the main Avast! scanner window, but it even states under the Exclusions setting that it does not apply to the Resident Scanner. Where is it that I can exclude things from the on-access scanner? Is it in an INI file, or hidden somewhere in the interface? I couldn’t find it anywhere…

It sounds like you’ve already excluded it in the on-demand scanner, so you will need to exclude in the on-access scanner too.

Right click the a-icon in your tray
Click On-Access Protection Control
Highlight Standard Shield
Click the Customize Button
Click the Advanced tab
Click the Add button and add you exclusion

M

Thanks a lot. I knew it was buried somewhere :slight_smile:

I’m submitting the file now.

OK; other scanners saw it as adware too. I’m not exactly sure why AdAware doesn’t pick it up, but I’m deleting it now. Thanks again for the tip on excluding things with the on-demand scanner…

Thanks for your help, too.