1 reply to this topic

[Sanity or Madness]

He's scared to remove any of these in case he breaks anything (but he's just reloaded to factory settings because of an especially bad spyware infection). Spybot's pulled the following up:

Xer0x:
- "settings" in HKEY_LOCAL_MACHINE/software/xerox

DSO Exploit:
- "Data source exploit object" in HKEY_USERS/.DEFAULTS/Software/Microsoft/Windows/Current Version/Internet Setting

Alexa Related:
- "What's related link" in C/Windows/Web/Related.htm

NewsUpdate:
- "Interface (_DCTMarqEvents)" in HKEY_LOCAL_MACHINE/software/Classes/Interface/{8614A943-FF72-11D0-9BA1-00AA00464A16}

- "Ad settings" in HKEY_LOCAL_MACHINE/software/Creative Tech/Software Installed/News

- "Autorun Settings" in HKEY_LOCAL_MACHINE/software/Microsoft/Windows/CurrentVersion/NewsUpd

- "Class ID" in HKEY_CLASSES_ROOT/CLSID/{8614A944-FF72-11D0-9BA1-00AA00464A16}

- "Interface (_DCTMarq)" in HKEY_LOCAL_MACHINE/software/Classes/Interface/{8614A942-FF72-11D0-9BA1-00AA00464A16}

- "Program Directory" - in C/Program Files/Creative/News
(x2)

- "Root Class" in HKEY_CLASSES_ROOT/CTMARQ.CTMarqCtrl.1

...and he's wondering how dangerous these are. I'm tempted to tell him to vape the lot, but...

[Tuxedo Jack]

They're fine to nuke. Don't worry.