Possible False Positive: PornoAssist (registry entry for addthis.com)?
I'm running Windows 7 with IE11 and Spybot updates from 4/24. I got the following entry in a recent scan:
PornoAssist: [SBI $6749D087] User settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-830593641-2385924060-362116996-1001\Software\Microsoft\Internet Explorer\DOMStorage\addthis.com
Aside from tracking cookies, no other items were detected. I chose "fix selected problems," which deleted the registry key. After re-scanning, no issues were detected.
The referenced registry key appeared valid. It contained two values, NumberOfSubdomains and Total. If I visit addthis.com (which is a valid commercial website), it's recreated and subsequently picked up by in a Spybot scan, which seems to confirm it's a false positive.
1 Attachment(s)
addthis.com and/or pornoassist
Hi. addthis.com appears to be a legit site. Whenever I go to that site, or any other site that utilizes their widgets, addthis.com is added to the DOMStorage section of my registry. This is normal. however, spybot with the latest defs is classifying this as a pornoassist Trojan. I emailed addthis, and they said this should not be happeneing.
Any ideas here?
Attachment 11443
Thanks in advance.
Possible False Positive: PornoAssist (registry entry for addthis.com)?
I just finished running Spybot on my wife's computer and mine. Both came up with the PornoAssist Trojan. Don't have a clue where that came from.