Spy program erasing one of my files???

[Gritz]

In my Utilities folder I keep a list of my favorite software tools. One of those tools is RockXP4 which I use to insert a legal key code into a system I've built which saves me time if the system is already built before I receive the OS. No matter how many times I copy it into the folder from a portable USB drive to my hard drive, it ALWAYS ends up missing a few days later. I suspect something is in the Registry erasing this file even though I set the file/folder attributes to "read only". I don't have a clue .... anybody have any ideas??

[Squash]

I've had this before when an anti-virus identifies some keygen or "hacktool" (as many of them refer to it) as a virus and would remove it or put it into a quarantine folder without notification. There should be a record of it in the AV's log file, though. Also if your AV uses heuristics this may happen. With some AV programs you can turn off "hacktool" detection. I remember having a version of Norton a few years back that gave this option and it cleared up the problem I was having. The setting was located in the "Threat Detection Categories" section.

Rockxp4 uses an open-source program called pwdump2.exe which trips several AV programs into action. If you can't find a way to turn off detection, you should be able to exclude your Utilities directory from scanning. Do a search on "rockxp" and "false positive" for more info.

[Gritz]

Very good Squash .... I had not thought that my AVG might be guilty. MS, maybe .... but not AVG. I did not find my missing file in AVG or Spyweeper but I did see some of my favorite utility apps quarantined such as UltimateCD4Windows and Rootkit Revealer .... so I've got to figure out how to eliminate scanning my Utility Folder as you said. It appears that in AVG you may have to buy the version that allows a Custom Scan but I'll have to look into it further. Thanks for giving me an area to investigate .... I appreciate.