Results 1 to 7 of 7

Thread: Swizzor?

  1. #1
    Junior Member
    Join Date
    May 2006
    Posts
    18

    Default Swizzor?

    Spybot 'detected' swizzor on my machine. As my machine is clean and neither Avast nor BoClean have alerted me to any malware, I assume the following are false positives:

    Swizzor: Settings (Registry value, nothing done)
    HKEY_USERS\S-1-5-21-1898707405-3787910941-3636372798-1007\Software\Microsoft\Internet Explorer\New Windows\Allow\dns-look-up.com

    Swizzor: Settings (Registry value, nothing done)
    HKEY_USERS\S-1-5-21-1898707405-3787910941-3636372798-1007\Software\Microsoft\Internet Explorer\New Windows\Allow\dns-look-up.com

    --- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

    If Spybot require, I will gladly send files, if a team man could help me in that regard.
    Last edited by greenhatch; 2007-02-07 at 14:13.

  2. #2
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    Do you have installed the latest updates from the 2007-02-07?

    Best regards
    Sandra
    Team Spybot

  3. #3
    Junior Member
    Join Date
    May 2006
    Posts
    18

    Default

    I didn't know Spybot updated other than on a Friday: was it a 'special'? Anyways I have now updated for Wednesday's update, re-scanned and guess what? Yes, I'm afraid so: Swizzor is still there in the detection!!
    So, I repeat: Avast and BoClean have not alerted me to any malware, so I presume this is a false positive.

  4. #4
    Member of Team Spybot Buster's Avatar
    Join Date
    Oct 2005
    Location
    Bochum/Germany
    Posts
    389

    Default

    HKEY_USERS\S-1-5-21-1898707405-3787910941-3636372798-1007\Software\Microsoft\Internet Explorer\New Windows\Allow\dns-look-up.com
    means, that dns-look-up.com is allowed to display pop ups. If you fix this by Spybot, dns-lookup.com will no longer be explicitly allowed to display pop ups. So this is not a false positive.
    "The advantage of wisdom is that you can always act the fool. The opposite is quite tough."

    K. Tucholsky

    _______________________________________________________________

    Please help us improve Spybot and download our distributed testing client.

  5. #5
    Junior Member
    Join Date
    May 2006
    Posts
    18

    Default

    So are you saying Swizzor is on my machine, despite Avast and BoClean reporting nothing? I am somewhat confused otherwise.

  6. #6
    Junior Member
    Join Date
    May 2006
    Posts
    18

    Default

    Sorry, Buster, the penny has dropped now I looked up my popup blocker settings. Something had added dns-lookup to the permitted settings, also netsearchsoft: even I had heard of the latter Now both removed!
    So thanks Spybot, you did indeed alert me to a problem in the scan: I just didn't know how to deal properly.
    Feel free to shift this thread or delete it.

  7. #7
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    Quote Originally Posted by greenhatch View Post
    I didn't know Spybot updated other than on a Friday: was it a 'special'?
    See the following thread in the Announcements forum:

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •