Possible False-Positive: PornoAssist (registry entry for addthis.com)? Again!
There is a thread a bit further down in the false-positive list labelled "Possible False-Positive: PornoAssist (registry entry for addthis.com)?"
The link is below:
http://forums.spybot.info/showthread...r-addthis-com)
I have been having the same problem with a slightly different registry entry. When I have carried out a Spybot scan, I get this:
PornoAssist. (When expanded, I get as shown below)
HKEY_USERS\S-1-5-21-2212291575-3940681457-2494179134-1002\Software\Microsoft\Internet Explorer\DOMStorage\addthis.com
Spybot is telling me that it is a Trojan. Spybot safely removes it but when I reboot or come back onto the computer again, when I do another scan, it is back there again.
Can anybody tell me how I get rid of this completely or what the procedure is to eliminate it once and for all please?
It does not seem to affect my computer in any way. Is this anything to worry about?
Thank you
Wendykins
Possible False-Positive: PornoAssist (registry entry for addthis.com)? Again!
I've had the same problem as described in this and a prior thread, i.e. delete the "addthis.com" registry key, then it returns--in an hour or in a day, with or without a reboot, with or without going on the internet--with no apparent rhyme or reason (there is another key added as well: "ct1.addthis.com" which I deleted using Regedit--multiple times). I discovered "addthis" not during a routine scan but running it in response to my computer's squirrelly behavior. Performed the delete and it returned to normal so I assumed that it was indeed an active and malicious Trojan. So if the "addthis.com" registry key is not malicious, where does it come from and what does it do? I'm not ready to accept that it's a false positive (not detected by either AVG or Malwarebytes scans), but hoping it is so.
