Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: Possible False Positive: PornoAssist (registry entry for addthis.com)?

  1. #1
    Junior Member
    Join Date
    Apr 2014
    Posts
    1

    Default Possible False Positive: PornoAssist (registry entry for addthis.com)?

    I'm running Windows 7 with IE11 and Spybot updates from 4/24. I got the following entry in a recent scan:

    PornoAssist: [SBI $6749D087] User settings (Registry key, nothing done)
    HKEY_USERS\S-1-5-21-830593641-2385924060-362116996-1001\Software\Microsoft\Internet Explorer\DOMStorage\addthis.com

    Aside from tracking cookies, no other items were detected. I chose "fix selected problems," which deleted the registry key. After re-scanning, no issues were detected.

    The referenced registry key appeared valid. It contained two values, NumberOfSubdomains and Total. If I visit addthis.com (which is a valid commercial website), it's recreated and subsequently picked up by in a Spybot scan, which seems to confirm it's a false positive.

  2. #2
    Junior Member
    Join Date
    Apr 2014
    Posts
    1

    Default

    Quote Originally Posted by DylanW View Post
    I'm running Windows 7 with IE11 and Spybot updates from 4/24. I got the following entry in a recent scan:

    PornoAssist: [SBI $6749D087] User settings (Registry key, nothing done)
    HKEY_USERS\S-1-5-21-830593641-2385924060-362116996-1001\Software\Microsoft\Internet Explorer\DOMStorage\addthis.com
    I got the same "PornoAssist" flag. It's hard to believe that it's supposed to be there. It must be some bad thing, expecially since its in the registry. I wonder why nothing shows up on a Google search about this PornoAssist, other than this thread. It must be new and maybe something to worry about. I don't think that just because the Registry URL (addthis.com) seems ok, I wouldn't jump to conclusions. I don't want it in my registry and I never visited the site or anything porno.
    Last edited by vonada; 2014-04-30 at 13:28. Reason: minor edit

  3. #3
    Junior Member
    Join Date
    Apr 2014
    Posts
    1

    Default Add this

    Hello,

    i have same problem with this ****. Format system disc,reinstalation Win 7 and update system do not resolve this detection.

  4. #4
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,955

    Default

    Hello,

    Thank you for reporting, I will bring this topic to the attention of a detective.

    Kind regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  5. #5
    Junior Member
    Join Date
    Apr 2014
    Location
    Italy
    Posts
    1

    Default Addthis - PornoAssist

    I have trace on my pc of this entry "Addthis" on the registry togheter with other two entries (tracks).
    Spybot Search and destroy has pointed out the first entry as Trojan and the other two as tracks.
    I have cleaned all and now the entries seem cancelled on the registry.
    Thanks to S.S.D.!
    The browser interested was only I.E. while Chrome is free.
    I have investigate on "Addthis" and his activity is normal ($12 per month for our best widgets, content recommendations and other tools that drive traffic on your site) or seems normal, but some site may use it in improper way...

  6. #6
    Junior Member
    Join Date
    May 2014
    Posts
    2

    Default addthis.com and/or pornoassist

    Hi. addthis.com appears to be a legit site. Whenever I go to that site, or any other site that utilizes their widgets, addthis.com is added to the DOMStorage section of my registry. This is normal. however, spybot with the latest defs is classifying this as a pornoassist Trojan. I emailed addthis, and they said this should not be happeneing.

    Any ideas here?

    addthis.jpg

    Thanks in advance.
    Last edited by riffwraith; 2014-05-01 at 21:43.

  7. #7
    Junior Member
    Join Date
    May 2014
    Posts
    2

    Default

    What happened here?

  8. #8
    Member of Team Spybot micha's Avatar
    Join Date
    Oct 2005
    Posts
    31

    Default

    Thank you for reporting this, please ignore this result, it will be removed from our detection database effective with the next detection update scheduled for Wednesday 2014-05-07.

  9. #9
    Junior Member
    Join Date
    May 2014
    Posts
    1

    Default Possible False Positive: PornoAssist (registry entry for addthis.com)?

    I just finished running Spybot on my wife's computer and mine. Both came up with the PornoAssist Trojan. Don't have a clue where that came from.

  10. #10
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,955

    Default

    Hello habs7,

    Quote Originally Posted by habs71 View Post
    I just finished running Spybot on my wife's computer and mine. Both came up with the PornoAssist Trojan. Don't have a clue where that came from.
    This was reported as a possible false positive and confirmed.

    Quote Originally Posted by micha View Post
    Thank you for reporting this, please ignore this result, it will be removed from our detection database effective with the next detection update scheduled for Wednesday 2014-05-07.
    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •