Spyware??

[xarb]

Apparently "C:\Program Files\Xara\Xara Web Designer\UNZDLL.DLL" is spyware according to ZoneAlarm! (Win32.Adware.Starr)

Is it? Or has something else infected it? Or is it a false alarm?!

[Soquili]

That file on my system is 92 KB. If your is the same then I would say you have a false alarm.

If it is larger then you have an infected file.

[zaphodeist]

Done a full scan today with AVG 8 (full version) which didn't react to that file.

[gwpriester]

Many anti-virus programs flag any program that communicates with the Internet in the background which is how most contemporary software applications check for updates.

You may need to add Webdesigner.exe to your list of trusted applications. That is if you think you can trust Xara.

[steve.ledger]

UNZDLL.DLL is a part of Delphi ZipMaster package used to compress/decompress .xar / .web files when saved and then expand when loaded in WD.

It's a common package used by many applications over the years.

Some viruses are written to use common headers an an to attempt to trick AV software into allowing them to execute, this can however lead some legit files being falsely flagged.

[xarb]

Many anti-virus programs flag any program that communicates with the Internet in the background which is how most contemporary software applications check for updates. You may need to add Webdesigner.exe to your list of trusted applications.

I think you're referring to a firewall, but I was referring to a spyware scan.

[Carrot]

Done a full scan with Mcaffee and no problem here either

Carrot

[Spinny]

I think you're referring to a firewall, but I was referring to a spyware scan.

Not necessarily. That behavior is checked by many anti-malware programs, and they should provide means for tagging a file to be trusted (or otherwise). What specific program gave you this alert? Full scans of my system (with WD installed and recently upgraded) using SpyBot and AVG8 show nothing untoward. As was noted above, it would seem either your particular scanning program has an issue with this file, or yours has somehow become infected through another agency.

[Fred C]

Hmmm....Scanning the file with SpyBot returns "Iopus"; defined as a Keylogger.?

[handrawn]

ah - well heuristics - that's basically educated guesswork... it certainly will not be right every time....

my Panda Av reported the file clean

incidently Bill, on my disc the file is 116 KB.....[NTFS-XPhome - XWD trial version]