SearchSquire (Adware) HKEY_CURRENT_USER\Software...

B

Bill

\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\SearchSqire.com

This item keeps appearing each scan I run, and each time
I tell it to remove it, it says it has, but it shows up
still with each scan. How can I get rid of it?
 
J

Jim Nugent

Bill said:
\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\SearchSqire.com

This item keeps appearing each scan I run, and each time
I tell it to remove it, it says it has, but it shows up
still with each scan. How can I get rid of it?

You must also have Spybot S&D. It's a known false positive. MS-AS has
trouble with the context in which it sees "signatures." In this case it
finds SearchSquire.com is in the Zone map set to Zone 4 (Restricted) which
is fine, and does not mean SearchSquire is on your system. MS-AS triggers
just because it's part of a registry key. Set it to Ignore Always.
 
E

Eric

Actually, you probably don't want to get rid of it. Use
"Ignore Always" instead.

This is caused by having "searchsquire.com" in your list of
restricted sites in Internet Explorer. (You might want to
double-check your list of restricted sites and make sure
*.searchsquire.com is still there.)

I don't know why AntiSpyware flags it in the first place -
it shouldn't in my opinion. But it's beta software, I guess.

Eric

p.s. I'm not sure it's a good idea to use your real email
address even here.
 
D

Dick Cardy

K

Kaspars

Hi, Dick!
Most likely, (IMHO) 'searchsquire' entry may be
originated from IE-SPYAD merged regfile; See:
https://netfiles.uiuc.edu/ehowes/www/resource.htm
Regards - Kaspars
-----Original Message-----
in message
(e-mail address removed)..
..
Yes, this is a false positive.
--

Bill

http://www.doxdesk.com/parasite/SearchSquire.html says
otherwise.

Everyone of my computers has Spybot S & D and not all of
them have
searchsquire. If it was part of Spybot S & D I would
expect to see it on
every computer {25} I own.

In fact if you go to the Spybot S & D site and do a
search on searchsquire
it refers you to to the link above (please see
http://www.safer-networking.org/en/threats/291.html )

Dick
 
J

JRosenfeld

Latest MSAS definitions updates (5685, downloaded today)
no longer seems to flag this FP.
 
B

Bill Sanderson

I know that SearchSquire is something real and appropriate to be removed by
Microsoft Antispyware. And, there have been a few actual sightings of the
real thing in these groups. However, many of the hits termed "SearchSquire"
by the app have been settings of that domain in the restricted sites zone of
IE, I believe by Spybot Search & Destroy.

Eric has just reported that current definitions (5685) seem to have fixed
this one, which is good news. It really isn't a big issue, but it has
generated a fair amount of traffic here.

I'm not sure why you see it on some machines but not others--I think this is
an optional operation in Spybot Search & destroy--adding to the list of
restricted sites.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top