PDA

View Full Version : PremiumSearch



Jimothy
2008-02-07, 19:41
I appreciate any advice i can get on this matter.

I updated my spybot today to the newest version and did a search. The expected handful of tracking cookies came up, as well as something new, labelled "PremiumSearch".

It was a .gif file, located in the temp folder entitled simply "t". I looked at the date it was created and was 2005, though im sure there must be ways of faking that.

Anyway, i did some research. Found out it changes the host files so checked those and none of the search engines are being redirected, which seemes to be the primary point of this particular spyware. No new toolbars either. My computer hasn't been giving me any problems i.e. no suspicious behaviour. I don't run p2p software, i keep everything updated.

Anyway, spybot deleted the image no problem. I'm just wondering whether this was a false positive or if i'm in danger and the spyware is very well hidden.

Thanks,

Jimothy

pskelley
2008-02-09, 14:04
Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance)
http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

Hi Jimothy, you have posted in the Malware Removal forum, I suggest you post here:
http://forums.spybot.info/forumdisplay.php?f=4 <<< Spybot forum
http://forums.spybot.info/forumdisplay.php?f=16 <<< false positives

folks there are very knowledgeable about Spybot S&D and will be glad to advise you.

Thanks