Registry Change Attempted but Denied

Harry Letterman

New member
With Spybot 1.5 this morning I noticed a registry entry change warning from Spybot. A toolbar was trying to install. I clicked the "Deny change" button and ticked "Remember this decision". I have a screenshot of the Spybot registry change warning window.

About a week ago I had a bad encounter with h**p:/mamaha.info/drugs/CalCet.htm. Details of that incident can be read at this Spyware Warrior thread. "Dawg" at Wilders Security Forum says that the host of the malware is h**p://www.sex2person.info/xxxxxx/ (link to Dawg's post).

I scanned with Spybot 1.4 and it fixed 3 registry changes. A couple days later I updated to Spybot 1.5 and a scan showed no problems. However, I have noticed a couple of times where IE 6 windows would "cascade open" uncontrollably. I have a HijackThis thread at Spyware Warrior but there are no takers so far. I am also doing a trial evaluation of SpywareTerminator and did a "Fast Spyware Scan" and it found 2 items (the links are to descriptions only):
AnalogX PacketMon
BrainNames (Sophos link)

I just performed a new scan with Spybot 1.5 and it says that no problems were found. I do have the Logs from v1.4 where Mamaha was involved. Should I post a HJT log here? I'm primarily concerned about that attempted registry change (BHO toolbar). I DID deny the change.

Thanks for reading!
 
Last edited by a moderator:
Hi Tashi,

Thanks for the reply and advice. I adctually did know not to post an HJT log in this particular forum. I should have been more clear in my question.

I just had another incident where IE 6 windows would "cascade open" uncontrollably. I rebooted and, for now, things are fine.

I will have Suzi (Admin at Spyware Warrior) delete my HJT post as there are still no replies.


I don't know if this helps but here is Spybot registry change warning window screenshot -

Bresson34
 
Back
Top