False positive, searchsquire

  • Thread starter Thread starter rk
  • Start date Start date
R

rk

Quoting Scan History Details:
SearchSquire Adware more information...
Details: SearchSquire is an Internet Explorer sidebar
containing paid links that open when you use search
engines.
Status: Ignored
Elevated threat - Elevated threats are usually threats
that fall into the range of adware in which data about a
user's habits are tracked and sent back to a server for
analysis without your consent or knowledge.

Infected registry keys/values detected
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Internet Settings\ZoneMap\Domains\searchsquire.com
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Internet Settings\ZoneMap\Domains\searchsquire.com * 4

Ending quote of Scan History Details

I don't believe that those registry settings indicate that
searchsquire adware is installed. Instead, I interpret
those registry settings as an appropriate measure to block
access to searchsquire.com by adding *.searchsquire.com to
the Restricted Sites list.
 
-----Original Message-----
Quoting Scan History Details:
SearchSquire Adware more information...
Details: SearchSquire is an Internet Explorer sidebar
containing paid links that open when you use search
engines.
Status: Ignored
Elevated threat - Elevated threats are usually threats
that fall into the range of adware in which data about a
user's habits are tracked and sent back to a server for
analysis without your consent or knowledge.

Infected registry keys/values detected
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi on
\Internet Settings\ZoneMap\Domains\searchsquire.com
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi on
\Internet Settings\ZoneMap\Domains\searchsquire.com * 4

Ending quote of Scan History Details

I don't believe that those registry settings indicate that
searchsquire adware is installed. Instead, I interpret
those registry settings as an appropriate measure to block
access to searchsquire.com by adding *.searchsquire.com to
the Restricted Sites list.
Click to expand...



Yes, I also belive that's a false positive. It's one of
the items set by Spybot Search & Destroy (immunize).
 
That would explain why I saw it on the vast majority of machines I've run
scans on so far.
 
Back
Top