Search Squire

[Joey1]

Whenever I run a scan, Search Squire turns up.

The problem is that MS anti-spyware thinks it's in the
trusted zone, but instead it's in the restricted zone, so
removing it would actually LOWER the protections by
removing the searchsquire.com from the restricted zone.

 

[Spider]

1/28/2005 6:28:26 PM

Whenever I run a scan, Search Squire turns up.

The problem is that MS anti-spyware thinks it's in the
trusted zone, but instead it's in the restricted zone, so
removing it would actually LOWER the protections by
removing the searchsquire.com from the restricted zone.

Joey,
Thats been reported many times. MS is aware of it and likely will
have it worked out by the next release.

Spider
http://web.tampabay.rr.com/spider1
http://spider1.blogspot.com/

 

[Bill Sanderson]

Joey1--can you re-test this with 5685 definitions? (file, check for
updates) --see Help, about, to check what level you are currently on.

I've seen one report that this is fixed, and I'd love to have another.

 

[Ed Barba]

With the latest definitions (5685) this false positive Search Squire issue
has been resolved for me.
Ed

 

[Spider]

1/28/2005 7:43:30 PM

Joey1--can you re-test this with 5685 definitions? (file, check for
updates) --see Help, about, to check what level you are currently on.

I've seen one report that this is fixed, and I'd love to have another.

Bill,
They may have resolved the particular problem with Searchsquire, but
they did not get the underlying issue fixed. It is going to take
more then a definition update to resolve the actual problem. The
software is not able to distinguish between a trusted site and a
restricted site. It seems to think everything is in the trusted zone.
Please try going to your Internet Options security settings and add
a site to the restricted sites zone. What happens? If you get the
same behavior I do, you will get an Alert telling you it is being
added to your Trusted sites and asks if you want to allow the change.


Spider
http://web.tampabay.rr.com/spider1
http://spider1.blogspot.com/

 

[Bill Sanderson]

1/28/2005 7:43:30 PM
Bill,
They may have resolved the particular problem with Searchsquire, but
they did not get the underlying issue fixed. It is going to take
more then a definition update to resolve the actual problem. The
software is not able to distinguish between a trusted site and a
restricted site. It seems to think everything is in the trusted zone.
Please try going to your Internet Options security settings and add
a site to the restricted sites zone. What happens? If you get the
same behavior I do, you will get an Alert telling you it is being
added to your Trusted sites and asks if you want to allow the change.

Hmm - I'm thinking the same way you are. But I first tested adding a
trusted site--that worked fine except that I also got a home page URL change
alert which was spurious.

I then added 192.168.3.1 to the restricted sites list. No alerts at
all--and it is there in the list after closing all IE windows and reopening
IE.

So--for me, this seems to be working the way I'd like it to work except for
the spurious home page change alert.

 

[Alexander Suhovey]

Hmm - I'm thinking the same way you are. But I first tested adding a
trusted site--that worked fine except that I also got a home page URL
change alert which was spurious.

I then added 192.168.3.1 to the restricted sites list. No alerts at
all--and it is there in the list after closing all IE windows and
reopening IE.

So--for me, this seems to be working the way I'd like it to work except
for the spurious home page change alert.

I can confirm the behavior described by Spider. I tested it as soon as
readed (s)hes message and indeed a a falce alert appeared imlying that a
change to trusted sites need to be approved while i was adding an entry to
restricted sites.
However, for some reason I couldn't reproduce this now...
Windows XP SP2,
IE 6.0.2900.2180.xpsp_sp2_rtm.040803-2158
Microsoft AntiSpyware Version: 1.0.501
Spyware Definition Version: 5685 (1/28/2005 8:35:11 PM)

 

[Bill Sanderson]

I can confirm the behavior described by Spider. I tested it as soon as
readed (s)hes message and indeed a a falce alert appeared imlying that a
change to trusted sites need to be approved while i was adding an entry to
restricted sites.
However, for some reason I couldn't reproduce this now...
Windows XP SP2,
IE 6.0.2900.2180.xpsp_sp2_rtm.040803-2158
Microsoft AntiSpyware Version: 1.0.501
Spyware Definition Version: 5685 (1/28/2005 8:35:11 PM)

Well--not being able to reproduce it now is what we are all aiming for!