Jump to content


My friend's wondering about something with Spybot

  • Please log in to reply
1 reply to this topic

#1 Sanity or Madness

Sanity or Madness


  • New Member
  • Pip
  • 1 posts

Posted 09 July 2004 - 10:55 PM

He's scared to remove any of these in case he breaks anything (but he's just reloaded to factory settings because of an especially bad spyware infection). Spybot's pulled the following up:

- "settings" in HKEY_LOCAL_MACHINE/software/xerox

DSO Exploit:
- "Data source exploit object" in HKEY_USERS/.DEFAULTS/Software/Microsoft/Windows/Current Version/Internet Setting

Alexa Related:
- "What's related link" in C/Windows/Web/Related.htm

- "Interface (_DCTMarqEvents)" in HKEY_LOCAL_MACHINE/software/Classes/Interface/{8614A943-FF72-11D0-9BA1-00AA00464A16}

- "Ad settings" in HKEY_LOCAL_MACHINE/software/Creative Tech/Software Installed/News

- "Autorun Settings" in HKEY_LOCAL_MACHINE/software/Microsoft/Windows/CurrentVersion/NewsUpd

- "Class ID" in HKEY_CLASSES_ROOT/CLSID/{8614A944-FF72-11D0-9BA1-00AA00464A16}

- "Interface (_DCTMarq)" in HKEY_LOCAL_MACHINE/software/Classes/Interface/{8614A942-FF72-11D0-9BA1-00AA00464A16}

- "Program Directory" - in C/Program Files/Creative/News

- "Root Class" in HKEY_CLASSES_ROOT/CTMARQ.CTMarqCtrl.1

...and he's wondering how dangerous these are. I'm tempted to tell him to vape the lot, but...

#2 Tuxedo Jack

Tuxedo Jack

    Creator of TuxPE, a Cat5-o'-9-Tails, Etherkillers, and more

  • Expert
  • PipPipPipPipPip
  • 1,758 posts

Posted 10 July 2004 - 02:23 AM

They're fine to nuke. Don't worry.
Signature file is under revision. This will be back shortly.

Member of UNITE
Support SpywareInfo Forum - click the button