PC Review Forums Newsgroups Microsoft AntiSpyware Security Signatures False positive, searchsquire

Reply

False positive, searchsquire

 
Thread Tools Rate Thread
Old 06-01-2005, 05:26 PM   #1
rk
Guest
 
Posts: n/a
Default False positive, searchsquire


Quoting Scan History Details:
SearchSquire Adware more information...
Details: SearchSquire is an Internet Explorer sidebar
containing paid links that open when you use search
engines.
Status: Ignored
Elevated threat - Elevated threats are usually threats
that fall into the range of adware in which data about a
user's habits are tracked and sent back to a server for
analysis without your consent or knowledge.

Infected registry keys/values detected
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Internet Settings\ZoneMap\Domains\searchsquire.com
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Internet Settings\ZoneMap\Domains\searchsquire.com * 4

Ending quote of Scan History Details

I don't believe that those registry settings indicate that
searchsquire adware is installed. Instead, I interpret
those registry settings as an appropriate measure to block
access to searchsquire.com by adding *.searchsquire.com to
the Restricted Sites list.
  Reply With Quote
Old 06-01-2005, 09:54 PM   #2
Brian
Guest
 
Posts: n/a
Default False positive, searchsquire


>-----Original Message-----
>Quoting Scan History Details:
>SearchSquire Adware more information...
>Details: SearchSquire is an Internet Explorer sidebar
>containing paid links that open when you use search
>engines.
>Status: Ignored
>Elevated threat - Elevated threats are usually threats
>that fall into the range of adware in which data about a
>user's habits are tracked and sent back to a server for
>analysis without your consent or knowledge.
>
>Infected registry keys/values detected
>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi

on
>\Internet Settings\ZoneMap\Domains\searchsquire.com
>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi

on
>\Internet Settings\ZoneMap\Domains\searchsquire.com * 4
>
>Ending quote of Scan History Details
>
>I don't believe that those registry settings indicate

that
>searchsquire adware is installed. Instead, I interpret
>those registry settings as an appropriate measure to

block
>access to searchsquire.com by adding *.searchsquire.com

to
>the Restricted Sites list.




Yes, I also belive that's a false positive. It's one of
the items set by Spybot Search & Destroy (immunize).
  Reply With Quote
Old 06-01-2005, 11:41 PM   #3
Bill Sanderson
Guest
 
Posts: n/a
Default Re: False positive, searchsquire

That would explain why I saw it on the vast majority of machines I've run
scans on so far.

"Brian" <anonymous@discussions.microsoft.com> wrote in message
news:01c801c4f43a$4aff43a0$a501280a@phx.gbl...
>
>>-----Original Message-----
>>Quoting Scan History Details:
>>SearchSquire Adware more information...
>>Details: SearchSquire is an Internet Explorer sidebar
>>containing paid links that open when you use search
>>engines.
>>Status: Ignored
>>Elevated threat - Elevated threats are usually threats
>>that fall into the range of adware in which data about a
>>user's habits are tracked and sent back to a server for
>>analysis without your consent or knowledge.
>>
>>Infected registry keys/values detected
>>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi

> on
>>\Internet Settings\ZoneMap\Domains\searchsquire.com
>>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi

> on
>>\Internet Settings\ZoneMap\Domains\searchsquire.com * 4
>>
>>Ending quote of Scan History Details
>>
>>I don't believe that those registry settings indicate

> that
>>searchsquire adware is installed. Instead, I interpret
>>those registry settings as an appropriate measure to

> block
>>access to searchsquire.com by adding *.searchsquire.com

> to
>>the Restricted Sites list.

>
>
>
> Yes, I also belive that's a false positive. It's one of
> the items set by Spybot Search & Destroy (immunize).



  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off