BeWare of Auto Updating Latest Defs 2006-01-20 from Safe Networking #1 (Europe)

[Shawn]

Fired up Spybot SD, did a search for updates...Hey!! updates where available..So naturally I downloaded them. (believe it was from Safer Networking #1 in Europe...nexted I did immunize..My MS Anti Spyware alerts me of adservs.com trying to insert itself in 'Trusted Sites' Zone...:eek: WHAT IS THIS!! I thought. I am not knocking SBSD...but I thought that was way weird. That was on my 64 bit os. Physically downloaded update via web for 32 bit..installed...while writing this To get me Terms right I opened SpyBot (on 32) Did update check..hmm says there is an update,,should not be..i just did..ok lets experiment..Download..immunize...Ms Anti Spyware Alerts "A New Internet Explore Trusted Site requires your approval" Trusted Site:adservs.com...I don't think so..As I sat here typing this I had just recreated the the 'experience again'

[md usa spybot fan]

The report from Microsoft AntiSpyware is a false positive.

Please see this article from Microsoft about similar problems:
http://support.microsoft.com/default.aspx?scid=kb;en-us;902956

Spybot is adding The following entries to the restricted zone (dots changed to underscores to pervent a link from being created):
csx_adservs_com
www_csx_adservs_com
Using the following registry entries:


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adservs.com]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adservs.com\csx]
"*"=dword:00000004

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adservs.com\www.csx]
"*"=dword:00000004
Microsoft AntiSpyware is evidently misinterpreting those entries as a threat.

Possible residual problem: If you deny the registry change in Microsoft AntiSpyware, Microsoft AntiSpyware may have remembered that denial and prevent you from adding those entry without allowing to select an option. To overcome this:
Go into Microsoft AntiSpyware > click on the stared item "Real-time Protection" in the left pane > then click "Application Agents" > page down (center pane) until you find "Internet Explorer Trusted Sites" and highlight it > in the right pane click "Manage Allowed/blocked…" > inspect both the Allowed and Blocked entries and delete any references to adservs.com. Then after backing out of and exiting Microsoft AntiSpyware, reimmunize in Spybot.

[Zenobia]

Have a look here:
http://www.spybot.info/en/faq/45.html
and,from microsoft:
http://support.microsoft.com/?kbid=902956

[Zenobia]

Lol,never mind.

[md usa spybot fan]

Zenobia:

Never mind what?

You provided another reference:
http://www.spybot.info/en/faq/45.html

[Zenobia]

Sure,sure,Speedy González. :D