bugs

[jopa66]

My own testing of this program so far is very positive and I will consider it a third tool to use along with Spybot and Ad-Aware. It still needs some work obviously, and I assume that these groups have been created to elicit user feedback to work out any problems.

A couple of problems I've found:

(1) The following is actually an entry in the Restricted Sites zone.

SearchSquire Adware more information...
Details: SearchSquire is an Internet Explorer sidebar containing paid links that open when you use search engines.
Status: Ignored
Elevated threat - Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge.

Infected registry keys/values detected
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchsquire.com
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchsquire.com * 4


**********************************

(2) Create a folder in the Favorites hierarchy called "Cool Sites". (no quotes)

This folder and any Favorites or subfolders placed within are identified as:

EZCyberSearch Adware more information...
Details: EZCyberSearch is an Internet Explorer toolbar that displays pop-up advertisements and changes Internet Explorers search features.
Status: Ignored
Elevated threat - Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge.

 

[Steve Dodson [MSFT]]

Just to follow up, the searchsquire issue is known and we are investigating.

-steve


Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
--------------------

From: "jopa66" <[email protected]>
Subject: bugs
Date: Sat, 8 Jan 2005 09:58:40 -0500
Lines: 148
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_003E_01C4F568.A10ACCE0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
Message-ID: <#6yh#[email protected]>
Newsgroups: microsoft.private.security.spyware.general
NNTP-Posting-Host: dyn216-8-128-165.adsl.mnsi.net 216.8.128.165
Path: cpmsftngxa10.phx.gbl!cpmsftngsa06.privatenews.microsoft.com!CPMSFTNGSA04.pri
vatenews.microsoft.com
Xref: cpmsftngxa10.phx.gbl microsoft.private.security.spyware.general:973
X-Tomcat-NG: microsoft.private.security.spyware.general

My own testing of this program so far is very positive and I will consider

it a third tool to use along with Spybot and Ad-Aware. It still needs some
work obviously, and I assume that these groups have been created to elicit
user feedback to work out any problems.

A couple of problems I've found:
(1) The following is actually an entry in the Restricted Sites zone.
SearchSquire Adware more information...
Details: SearchSquire is an Internet Explorer sidebar containing paid

links that open when you use search engines.

Status: Ignored
Elevated threat - Elevated threats are usually threats that fall into the

range of adware in which data about a user's habits are tracked and sent
back to a server for analysis without your consent or knowledge.

Infected registry keys/values detected
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchsquire.com
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet

Settings\ZoneMap\Domains\searchsquire.com * 4

**********************************
(2) Create a folder in the Favorites hierarchy called "Cool Sites". (no quotes)
This folder and any Favorites or subfolders placed within are identified as:
EZCyberSearch Adware more information...
Details: EZCyberSearch is an Internet Explorer toolbar that displays

pop-up advertisements and changes Internet Explorers search features.

Status: Ignored
Elevated threat - Elevated threats are usually threats that fall into the

range of adware in which data about a user's habits are tracked and sent
back to a server for analysis without your consent or knowledge.