Are ALEXA malicious software in XP Home Edition Registration file

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

The following RegKey and RegValues were captured from my freshly formated
Hard Drive after I reinstalled the original Windows ME operating system and
then updated with Windows XP Home Edition prior to ever going online. If
these are inherent files associated with the Microsoft systems I have on my
computer, should I accept that they are non-malicious and enhance the smooth
operations of my Microsoft software?



Lavasoft Ad-Aware se
ArchiveData(auto-quarantine- 2007-01-27 22-44-30.bckp)
Referencefile : SE1R147 25.01.2007
======================================================

ALEXA
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[0]=Regkey : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}
obj[1]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "MenuStatusBar"
obj[2]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "Script"
obj[3]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "clsid"
obj[4]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "Icon"
obj[5]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "HotIcon"
obj[6]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "ButtonText"
obj[7]=RegValue : .DEFAULT\software\microsoft\internet
explorer\extensions\cmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
obj[8]=RegValue : S-1-5-18\software\microsoft\internet
explorer\extensions\cmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
obj[9]=RegValue :
S-1-5-21-1606980848-436374069-854245398-1004\software\microsoft\internet
explorer\extensions\cmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
 
savansown said:
The following RegKey and RegValues were captured from my freshly formated
Hard Drive after I reinstalled the original Windows ME operating system
and
then updated with Windows XP Home Edition prior to ever going online. If
these are inherent files associated with the Microsoft systems I have on
my
computer, should I accept that they are non-malicious and enhance the
smooth
operations of my Microsoft software?



Lavasoft Ad-Aware se
ArchiveData(auto-quarantine- 2007-01-27 22-44-30.bckp)
Referencefile : SE1R147 25.01.2007
======================================================

ALEXA
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[0]=Regkey : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}
obj[1]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "MenuStatusBar"
obj[2]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "Script"
obj[3]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "clsid"
obj[4]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "Icon"
obj[5]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "HotIcon"
obj[6]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "ButtonText"
obj[7]=RegValue : .DEFAULT\software\microsoft\internet
explorer\extensions\cmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
obj[8]=RegValue : S-1-5-18\software\microsoft\internet
explorer\extensions\cmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
obj[9]=RegValue :
S-1-5-21-1606980848-436374069-854245398-1004\software\microsoft\internet
explorer\extensions\cmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
Click to expand...

That depends on whether or not you use the "Related" button on the toolbar.
IE used to install these to use that non-malware part of Alexa. It is no
longer distributed with IE, though.
 
Thank you Mr. Saunders. I do not know what the "Related" button on the tool
bar is and I will infer ftom your reply that it is something I do not want to
use.


Frank Saunders said:
savansown said:
The following RegKey and RegValues were captured from my freshly formated
Hard Drive after I reinstalled the original Windows ME operating system
and
then updated with Windows XP Home Edition prior to ever going online. If
these are inherent files associated with the Microsoft systems I have on
my
computer, should I accept that they are non-malicious and enhance the
smooth
operations of my Microsoft software?



Lavasoft Ad-Aware se
ArchiveData(auto-quarantine- 2007-01-27 22-44-30.bckp)
Referencefile : SE1R147 25.01.2007
======================================================

ALEXA
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[0]=Regkey : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}
obj[1]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "MenuStatusBar"
obj[2]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "Script"
obj[3]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "clsid"
obj[4]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "Icon"
obj[5]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "HotIcon"
obj[6]=RegValue : software\microsoft\internet
explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} "ButtonText"
obj[7]=RegValue : .DEFAULT\software\microsoft\internet
explorer\extensions\cmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
obj[8]=RegValue : S-1-5-18\software\microsoft\internet
explorer\extensions\cmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
obj[9]=RegValue :
S-1-5-21-1606980848-436374069-854245398-1004\software\microsoft\internet
explorer\extensions\cmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
Click to expand...

That depends on whether or not you use the "Related" button on the toolbar.
IE used to install these to use that non-malware part of Alexa. It is no
longer distributed with IE, though.
Click to expand...
 
Then I would let Ad-Aware delete them.

savansown said:
Thank you Mr. Saunders. I do not know what the "Related" button on the
tool
bar is and I will infer ftom your reply that it is something I do not want
to
use.
Click to expand...
 
Back
Top