False positive? searchsquire in Zonemap\domains key * 4

[Rosenfeld]

Just installed antispyware beta, ran quick scan. It
reports searchsquire (Adware) registry entries

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Internet Settings\ZoneMap\Domains\searchsquire.com

and

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Internet Settings\ZoneMap\Domains\searchsquire.com * 4

That key and value is put there to place searchsquire.com
in the restricted zone.

I don't think Antispyware should offer to remove it.

 

[Mike Burgess]

Rosenfeld,
I'm getting the same "false-positive"

Infected registry keys/values detected
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\searchsquire.com
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\searchsquire.com * 4

Actual Registry Entry:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\searchsquire.com]
"*"=dword:00000004

Note: anything marked as "04" should *not* be removed, select: Ignore
____________________________________________________________
Mike Burgess [MVP Internet Explorer] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 01-06-05]
Please post replies to this Newsgroup, email address is invalid

 

[Lance]

Same problem. I'm setting it to "Ignore" for now.

Lance
*****

Rosenfeld said the following on 1/6/2005 11:58 AM:

 

[Erwin Michiels]

These entries are from the "immunize"-feature of Spybot S&D. MAS detects
these entries of the restricted sites list from Spybot S&D. So I think this
is a false positive.