Questions about registry value detected by SpyBot S&D

W

Whopper

SpyBot S&D v 1.3 detected a registry value that apparently has something to do
with spyware or malware called "SearchForIt"
When I try to "fix" it with SpyBot the same registry value keeps popping up
every time I run SpyBot, so evidently it is not deleted.
I can locate the registry value with regedit and it turns out to be a dword
value with the following name:

HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\activex
compatibility\{c109664b-ceb1-420b-b353-d55a561536dd}

I'm not sure what to do now, since I'm not a registry expert. Can I just delete
this registry entry in regedit? How do I know that this item actually has
something to do with spyware? How much of a problem is it to have something like
this in the registry?

Any advice is appreciated.

Whopper
 
R

R. McCarty

What you need to do to rid yourself of it, is remove the ActiveX
component from C:\Windows\Downloaded Program Files. Once
the ActiveX is gone, the Registry key replication will stop. Or you
can use the Add-on manager of IE to disable the ActiveX.
 
W

Whopper

Thanks for your reply, but I can find no item in C:\Windows\Downloaded Program
Files or in the Add-on Manager of IE that is called "SearchForIt" or has the
same name as the registry value.


What you need to do to rid yourself of it, is remove the ActiveX
component from C:\Windows\Downloaded Program Files. Once
the ActiveX is gone, the Registry key replication will stop. Or you
can use the Add-on manager of IE to disable the ActiveX.

Whopper
 
W

Whopper

I think I've found the answer.

I've stumbled on a discussion on the SpyBot S&D forums that states that it has
something to do with a registry entry that is made by SpywareBlaster,so it looks
to be an error in the SpyBot database. The SpyBot Team stated that they will fix
it in the next update, so the problem should be gone then.

Thanks for your efforts.



Whopper
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top