SearchSquire (Adware) HKEY_CURRENT_USER\Software...

  • Thread starter Thread starter Bill
  • Start date Start date
B

Bill

\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\SearchSqire.com

This item keeps appearing each scan I run, and each time
I tell it to remove it, it says it has, but it shows up
still with each scan. How can I get rid of it?
 
Bill said:
\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\SearchSqire.com

This item keeps appearing each scan I run, and each time
I tell it to remove it, it says it has, but it shows up
still with each scan. How can I get rid of it?
Click to expand...

You must also have Spybot S&D. It's a known false positive. MS-AS has
trouble with the context in which it sees "signatures." In this case it
finds SearchSquire.com is in the Zone map set to Zone 4 (Restricted) which
is fine, and does not mean SearchSquire is on your system. MS-AS triggers
just because it's part of a registry key. Set it to Ignore Always.
 
Actually, you probably don't want to get rid of it. Use
"Ignore Always" instead.

This is caused by having "searchsquire.com" in your list of
restricted sites in Internet Explorer. (You might want to
double-check your list of restricted sites and make sure
*.searchsquire.com is still there.)

I don't know why AntiSpyware flags it in the first place -
it shouldn't in my opinion. But it's beta software, I guess.

Eric

p.s. I'm not sure it's a good idea to use your real email
address even here.
 
Hi, Dick!
Most likely, (IMHO) 'searchsquire' entry may be
originated from IE-SPYAD merged regfile; See:
https://netfiles.uiuc.edu/ehowes/www/resource.htm
Regards - Kaspars
-----Original Message-----
Click to expand...
in message
(e-mail address removed)..
..
Yes, this is a false positive.
--
Click to expand...

Bill

http://www.doxdesk.com/parasite/SearchSquire.html says
otherwise.

Everyone of my computers has Spybot S & D and not all of
them have
searchsquire. If it was part of Spybot S & D I would
expect to see it on
every computer {25} I own.

In fact if you go to the Spybot S & D site and do a
search on searchsquire
it refers you to to the link above (please see
http://www.safer-networking.org/en/threats/291.html )

Dick
 
Latest MSAS definitions updates (5685, downloaded today)
no longer seems to flag this FP.
 
I know that SearchSquire is something real and appropriate to be removed by
Microsoft Antispyware. And, there have been a few actual sightings of the
real thing in these groups. However, many of the hits termed "SearchSquire"
by the app have been settings of that domain in the restricted sites zone of
IE, I believe by Spybot Search & Destroy.

Eric has just reported that current definitions (5685) seem to have fixed
this one, which is good news. It really isn't a big issue, but it has
generated a fair amount of traffic here.

I'm not sure why you see it on some machines but not others--I think this is
an optional operation in Spybot Search & destroy--adding to the list of
restricted sites.
 
Back
Top