Rosenfeld
2006-08-27, 13:25
latest beta.sbi flags this:
Dmcast.Toolbar: User settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-3090935711-3204504469-1825801191-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD96C556-65A3-11D0-983A-00C04FC29E36}
That registry key contains the following:
[HKEY_USERS\S-1-5-21-3090935711-3204504469-1825801191-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD96C556-65A3-11D0-983A-00C04FC29E36}]
[HKEY_USERS\S-1-5-21-3090935711-3204504469-1825801191-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD96C556-65A3-11D0-983A-00C04FC29E36}\iexplore]
"Type"=dword:00000001
"Flags"=dword:00000004
"Count"=dword:00000001
"Time"=hex:d6,07,08,00,06,00,1a,00,16,00,03,00,2a,00,6b,03
"Blocked"=dword:00000001
The CLSID {BD96C556-65A3-11D0-983A-00C04FC29E36} refers to RDS.datspace
Its inprocserver32 key points to C:\Program Files\Common Files\System\MSADC\msadco.dll
Is this a false positive? If not please explain
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2005-06-01 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-08-25 Includes\Beta.sbi (*)
2005-02-16 Includes\Beta.uti (*)
2006-08-25 Includes\Cookies.sbi (*)
2006-08-25 Includes\Dialer.sbi (*)
2006-08-25 Includes\Hijackers.sbi (*)
2006-08-25 Includes\Keyloggers.sbi (*)
2006-08-25 Includes\Malware.sbi (*)
2006-08-25 Includes\PUPS.sbi (*)
2006-08-25 Includes\Revision.sbi (*)
2006-08-25 Includes\Security.sbi (*)
2006-08-25 Includes\Spybots.sbi (*)
2005-02-17 Includes\Tracks.uti (*)
2006-08-25 Includes\Trojans.sbi (*)
Dmcast.Toolbar: User settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-3090935711-3204504469-1825801191-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD96C556-65A3-11D0-983A-00C04FC29E36}
That registry key contains the following:
[HKEY_USERS\S-1-5-21-3090935711-3204504469-1825801191-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD96C556-65A3-11D0-983A-00C04FC29E36}]
[HKEY_USERS\S-1-5-21-3090935711-3204504469-1825801191-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD96C556-65A3-11D0-983A-00C04FC29E36}\iexplore]
"Type"=dword:00000001
"Flags"=dword:00000004
"Count"=dword:00000001
"Time"=hex:d6,07,08,00,06,00,1a,00,16,00,03,00,2a,00,6b,03
"Blocked"=dword:00000001
The CLSID {BD96C556-65A3-11D0-983A-00C04FC29E36} refers to RDS.datspace
Its inprocserver32 key points to C:\Program Files\Common Files\System\MSADC\msadco.dll
Is this a false positive? If not please explain
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2005-06-01 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-08-25 Includes\Beta.sbi (*)
2005-02-16 Includes\Beta.uti (*)
2006-08-25 Includes\Cookies.sbi (*)
2006-08-25 Includes\Dialer.sbi (*)
2006-08-25 Includes\Hijackers.sbi (*)
2006-08-25 Includes\Keyloggers.sbi (*)
2006-08-25 Includes\Malware.sbi (*)
2006-08-25 Includes\PUPS.sbi (*)
2006-08-25 Includes\Revision.sbi (*)
2006-08-25 Includes\Security.sbi (*)
2006-08-25 Includes\Spybots.sbi (*)
2005-02-17 Includes\Tracks.uti (*)
2006-08-25 Includes\Trojans.sbi (*)