Results 1 to 9 of 9

Thread: spyware found in Registry

  1. #1
    Junior Member
    Join Date
    Jun 2012
    Posts
    5

    Default spyware found in Registry

    I just ran Spybot for the first time. In addition to tracking cookies, it found spyware in my Registry. I have always been cautioned not to mess with the Registry. Is it safe for me to allow Spybot to get rid of these entries? Are there any risks to the continued good functioning of my system? Thanks for your help, everyone!

  2. #2
    Senior Member
    Join Date
    Sep 2009
    Posts
    189

    Default

    It's fine. Just make sure it's not false positive.

  3. #3
    Junior Member
    Join Date
    Jun 2012
    Posts
    5

    Default False positive?

    Thanks! How can I tell if it's a false positive?

  4. #4
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    What is being found exactly?
    Please post the scan result here.
    Thanks.

    Best regards
    Sandra
    Team Spybot

  5. #5
    Junior Member
    Join Date
    Jun 2012
    Posts
    5

    Default registry spyware

    --- Report generated: 2012-06-13 10:02 ---

    CouponBar: [SBI $EFE6495E] Class ID (Registry key, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}

    CouponBar: [SBI $CB95FB49] Class ID (Registry key, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{A85A5E6A-DE2C-4F4E-99DC-F469DF5A0EEC}

    CouponBar: [SBI $51FE8B2E] Root class (Registry key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cpbrkpie.Coupon6Ctrl.1

    CouponBar: [SBI $51FE8B2E] Class ID (Registry key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}

    CouponBar: [SBI $7A5ACBCB] Interface (Registry key, nothing done)
    HKEY_CLASSES_ROOT\Interface\{6E780F0B-BCD6-40CB-B2DB-7AF47AB4D4A4}

    CouponBar: [SBI $7B15781E] Interface (Registry key, nothing done)
    HKEY_CLASSES_ROOT\Interface\{A138BE8B-F051-4802-9A3F-A750A6D862D4}

    CouponBar: [SBI $E3788A7B] Type library (Registry key, nothing done)
    HKEY_CLASSES_ROOT\TypeLib\{87255C51-CD7D-4506-B9AD-97606DAF53F3}

    Fraud.Sysguard: [SBI $1D5B98D0] User settings (Registry value, nothing done)
    HKEY_USERS\S-1-5-21-1229272821-1123561945-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Policies\Associations\LowRiskFileTypes

  6. #6
    Junior Member
    Join Date
    Jun 2012
    Posts
    5

    Default

    And thanks, Sandra!
    Les

  7. #7
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    You can delete them.
    The first is adware and the second is a fake security software.

    Best regards
    Sandra
    Team Spybot

  8. #8
    Junior Member
    Join Date
    Jun 2012
    Posts
    5

    Default

    So you're saying the first seven couponbar things are adware and the last is spyware and my computer won't die if I delete them?

    Thanks again, Les

  9. #9
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    That's correct.

    Best regards
    Sandra
    Team Spybot

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •