Funny Thingy Showing Up

T

TR

Just lately SpyBot S&D has started picking up a nasty in my registry
after each boot up. Neither AdAware nor PestPatrol are able to detect
this, which makes me wonder if it is a false positive that SpyBot is
catching.

With each Boot up, I get two entries in my WindowsXP Registry:

1.
PeopleOnPage.AproposMedia: Application ID (date & time)
HKEY_CLASSES_ROOT\AppID\{D0565000-9DF4-11D1-A281-00C04FCA0AA7}

2.
PeopleOnPage.AproposMedia: Application ID (date & time)
HKEY_CLASSES_ROOT\CLSID\{D0565000-9DF4-11D1-A281-00C04FCA0AA7}

Each time I have SpyBot delete the entries and each time I boot up,
they are back but as before neither AdAware nor PestPatrol are able to
detect the entries. I have looked at the programs that are run on
startup but none are newer than from a time before this started
happening (I haven't installed any new software since this started
happening). NAV2003 doesn't turn anything up either.

I run behind a router with built-in firewall, ZoneAlarm Software
Firewall, NAV2003 in auto protect mode, and have SpyBot set to
automatically detect bad browser downloads. I scan my complete system
twice a week with NAV2003, SpyBot, AdAware and PestPatrol not to
mention keeping everything updated. I try to practice Safe Hex in all
my online activities.

Anyone have any ideas what this is or if it is a false positive?

Regards,
TR
 
T

TR


That was one of the first places I went for help. My system does not
contain any of the files, configurations or instances listed on their
"FIX" page for this, which is probably the reason why PestPatrol has
never alerted me to the problem. You would think with it being
spelled out plainly in those two registry instances that PestPatrol
and AdAware would see it unless those two instances in the registry
are not actually doing any harm and SpyBot is over sensitive to them
being there.

Still they do continue to get replaced after being deleted and
rebooting.

Strange...

Regards,
TR
 
S

Sir_George

TR,

Have you actually followed the manual removal instructions completely? If
not, try it; it may be a little time consuming, but should cure your
problem.
 
T

TR

Have you actually followed the manual removal instructions completely? If
not, try it; it may be a little time consuming, but should cure your
problem.

My system does not contain any of the files, configurations or
instances listed on their "FIX" page for this. There is nothing
listed on their "FIX" page that is actually on my computer that I can
manually remove.

Regards.
TR
 
T

Terry Ripple

TR said:
Just lately SpyBot S&D has started picking up a nasty in my registry
after each boot up. Neither AdAware nor PestPatrol are able to detect
this, which makes me wonder if it is a false positive that SpyBot is
catching.

With each Boot up, I get two entries in my WindowsXP Registry:

1.
PeopleOnPage.AproposMedia: Application ID (date & time)
HKEY_CLASSES_ROOT\AppID\{D0565000-9DF4-11D1-A281-00C04FCA0AA7}

2.
PeopleOnPage.AproposMedia: Application ID (date & time)
HKEY_CLASSES_ROOT\CLSID\{D0565000-9DF4-11D1-A281-00C04FCA0AA7}

Each time I have SpyBot delete the entries and each time I boot up,
they are back but as before neither AdAware nor PestPatrol are able to
detect the entries. I have looked at the programs that are run on
startup but none are newer than from a time before this started
happening (I haven't installed any new software since this started
happening). NAV2003 doesn't turn anything up either.

I run behind a router with built-in firewall, ZoneAlarm Software
Firewall, NAV2003 in auto protect mode, and have SpyBot set to
automatically detect bad browser downloads. I scan my complete system
twice a week with NAV2003, SpyBot, AdAware and PestPatrol not to
mention keeping everything updated. I try to practice Safe Hex in all
my online activities.

Anyone have any ideas what this is or if it is a false positive?

Regards,
TR
Ignore it.
http://forums.net-integration.net/index.php?s=5996426df436fc3bd4a318574f917988&showtopic=9877
 
?

=?iso-8859-1?Q?Omar=A9?=

TR said:
That was one of the first places I went for help. My system does not
contain any of the files, configurations or instances listed on their
"FIX" page for this, which is probably the reason why PestPatrol has
never alerted me to the problem. You would think with it being
spelled out plainly in those two registry instances that PestPatrol
and AdAware would see it unless those two instances in the registry
are not actually doing any harm and SpyBot is over sensitive to them
being there.

Still they do continue to get replaced after being deleted and
rebooting.

Strange...

Regards,
TR

TR it happened to me after a NAV update but I was able to delete
them and they have not reappeared.
Is it NAV doing it I don't know but now I watch it very carefully
when doing updates.
Omar
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top