Possible False Positive: PornoAssist (registry entry for addthis.com)?

[paralegal54]

I found the same thing today in the Quarantine folder. I was both shocked as I do not ever go to any porn site. I have read all the posts but I didn't see where the pornoassist comes from. short of FB and government websites being the sites visited most often where does it come from? It is not something I want to find during a scan and placed in quarantine folder. If its a false positive and a legitimate site you would assume that you had to visit some website to pick it up. Yet why then is it called pornoassist if its legitimate website? porno is not named to encourage one to visit. Bottom line where does it come from, how does it classify as a false positive?

I'm running Windows 7 with IE11 and Spybot updates from 4/24. I got the following entry in a recent scan:

PornoAssist: [SBI $6749D087] User settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-830593641-2385924060-362116996-1001\Software\Microsoft\Internet Explorer\DOMStorage\addthis.com

Aside from tracking cookies, no other items were detected. I chose "fix selected problems," which deleted the registry key. After re-scanning, no issues were detected.

The referenced registry key appeared valid. It contained two values, NumberOfSubdomains and Total. If I visit addthis.com (which is a valid commercial website), it's recreated and subsequently picked up by in a Spybot scan, which seems to confirm it's a false positive.

[tashi]

Hello paralegal54,

Please see my response to your other post in the thread here: http://forums.spybot.info/showthread...162#post453162

Best regards.