SearchCentrix

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

This is my first time here. Defender had a new update today to 1.14.1314.1 .
I did a full scan and it found SearchCentrix but the registry file it found
does not look right to me but I know only a little about the registry, here
it is HKCU@S-1-5-21-1214440339-1644491937-682003330-1004\Software\Dynamic
Toolbar . I am thinking it might be a false positive. Also I did a copy paste
from windows defender so that is how it appears in the scan results, also I
put it in quarantine. I did a search and cannot find anything when the search
is for that registry key but do find stuff when I search for SearchCentrix,
but the information does not show that registry key. Help Thanks
 
Thanks for the reply and I have printed the symantec page. But more
questions. Since I do not see on the symantec page that registry file do I
assume it is a false positive? Should I restore it from defender quarantine
and then run Norton Antivirus 2005 which I have and if it finds nothing on
the next defender scan tell it to ignore the find? I assume I would have to
restore from defender before running Norton because Norton would not find it
in the Defender quarantine, is this correct?
 
Hi again

The major problem is that the bad guys changes software versions
and this is a Cat&Rat battle between ad/spyware and anti spyware.

I believe that this string with Dynamic Toolbar is a real one and
belongs to SearchCentrix and I removed it but with a Registry backup
before any Regedits.

If you also are running Norton I would send a mail to Symantecs support
about this.

I do not believe that NAV 2005 detects "security risks" but ask them.
This is a strange trap for Symantec users that they believes they are
protected.

http://securityresponse.symantec.com/avcenter/security_risks/index.html


regards
plun
 
Thanks for your help, I will leave it in quarantine for a week just to be
safe and then delete it and will check with Norton while waiting and also to
see what other people might find this week. Thanks
 
I've got the same problem, but neither Spybot S&D nor AdAware SE find it
(the latter found a bunch of stuff that neither Spybot nor WD found). I
am inclined to think that this is just a false positive.

Bill
 
Hi
I have been trying to get rid of this and nothing seems to do it. I did
find searchcentrix.com and they have an unstall listed there. My question to
all of you do you think it's wise to use the unstall utility there offer. I
also have not been able to detect this using Norton, McAfee, and Ad-Aware Se.

Ray41
 
I have the same experience, I use MAS everyday and remove SearchCentrix but
the next day it is back again. How do I get rid of it permanently ??
 
Hello All

This SEARCHCENTRIX is a real pain but I have debuged to the point that I
now know that after removing it with WD it doesn't come back until I open
Windows internet explorer browser. I am a Firefox browser user and only use
Windows internet exlorer for my hot mail.
Now that I know where it's coming from is there anyone out there that can
tell how to get rid of this thing.

RAY41
 
Hi

Maybe MS have seen this ??? I wish it was a formal report way
for detected threats but no or wrong removal...........

Check this kb from Symantec for manual removal:
http://securityresponse.symantec.com/avcenter/venc/data/adware.searchcentrix.html

Also take help from this removal guide:
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview

It ends up within a HijackThis forum if nothing helps.

Also Bleepingcomputer has a well reputaded HijackThis forum:
http://www.bleepingcomputer.com/forums/forum22.html

Or Aumha.org
http://www.aumha.org/a/quickfix.htm

Which also ends up in a HijackThis forum.

But go through all steps before any log posts !

For example Lavasofts Adaware removes som variants of this "pest".

regards
plun
 
Back
Top