False positive, searchsquire

[rk]

Quoting Scan History Details:
SearchSquire Adware more information...
Details: SearchSquire is an Internet Explorer sidebar
containing paid links that open when you use search
engines.
Status: Ignored
Elevated threat - Elevated threats are usually threats
that fall into the range of adware in which data about a
user's habits are tracked and sent back to a server for
analysis without your consent or knowledge.

Infected registry keys/values detected
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Internet Settings\ZoneMap\Domains\searchsquire.com
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Internet Settings\ZoneMap\Domains\searchsquire.com * 4

Ending quote of Scan History Details

I don't believe that those registry settings indicate that
searchsquire adware is installed. Instead, I interpret
those registry settings as an appropriate measure to block
access to searchsquire.com by adding *.searchsquire.com to
the Restricted Sites list.

 

[Brian]

-----Original Message-----
Quoting Scan History Details:
SearchSquire Adware more information...
Details: SearchSquire is an Internet Explorer sidebar
containing paid links that open when you use search
engines.
Status: Ignored
Elevated threat - Elevated threats are usually threats
that fall into the range of adware in which data about a
user's habits are tracked and sent back to a server for
analysis without your consent or knowledge.

Infected registry keys/values detected
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi on
\Internet Settings\ZoneMap\Domains\searchsquire.com
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi on
\Internet Settings\ZoneMap\Domains\searchsquire.com * 4

Ending quote of Scan History Details

I don't believe that those registry settings indicate that
searchsquire adware is installed. Instead, I interpret
those registry settings as an appropriate measure to block
access to searchsquire.com by adding *.searchsquire.com to
the Restricted Sites list.

Yes, I also belive that's a false positive. It's one of
the items set by Spybot Search & Destroy (immunize).

 

[Bill Sanderson]

That would explain why I saw it on the vast majority of machines I've run
scans on so far.