PDA

View Full Version : "Black & White List" is Empty.



user67
2007-05-28, 14:53
Hello,

I have the following message:

Category - "Global Browser Toolbar",

Change - "Value deleted", Entry {9FB3908C-6565-4CB0-...}

Could you please let me know - what do I need to do "Allow" or "Deny" ?

Also, the "Black & White List" is Empty. Although, I did many times "Blocked Registry Changes".

Please see the attachment: msg1.zip

Regards,

User67.

md usa spybot fan
2007-05-28, 17:41
According to CastleCops:
http://www.castlecops.com/modules.php?name=CLSID&query=9FB3908C-6565-4CB0-95F8-E9F85258723C

CLSID={9FB3908C-6565-4CB0-95F8-E9F85258723C}

OBJECT NAME:
Starware, Starware*** (* = random digit)
GUID:
{9FB3908C-6565-4CB0-95F8-E9F85258723C}
STATUS:
X TB ("X" - Certified spyware/foistware, or other malware) ("TB" – Toolbar)
FILENAME:
Starware.dll, Starware***.dll (* = random digit), MyToolBar.dll
DESCRIPTION:
Starware (http://www.symantec.com/security_response/writeup.jsp?docid=2005-050313-4341-99) adware variant - also see here (http://vil.nai.com/vil/content/v_135504.htm) and here (http://www.siteadvisor.com/sites/screensavers.com/downloads/371464/)

Since the value is being deleted you should do an "Allow change".
__________________

TeaTimer's "White & Black List" is only populated if you do a "Remember this decision" on a registry change or an "Automatically kill this process" or an "Allow this process to run (NOT RECOMMENDED) " on a process termination.
__________________

Please note: General support questions should be posted in the Spybot-S&D (http://forums.spybot.info/forumdisplay.php?f=4) forum rather than the False Positives (http://forums.spybot.info/forumdisplay.php?f=16) forum.