PDA

View Full Version : false possitive problem


Michael__aust
January 29th, 2005, 04:02 PM
I ran aol spyware removal software and it detected a case of cool websearch so i told the program to delete the file it found. I later found out that it may be a false possitive and Bubba said it was a valid windows XP file or something. Should I use system restore to bring it back? Or should I just leave it as it is. If I restore it will mean I have to reinstall Ewido. What you think I should do because I dont know? I dont know if the file is important or what it was c:\WINDOWS\nsreg.dat

so please help if possible

Infinity
January 29th, 2005, 06:15 PM
nsreg.dat:

http://help.netscape.com/kb/consumer/19990303-1.html

it is linked to Netscape , however if it is important to YOU you should keep it, aol antispyware is in fact aluria and it is known false positives king.

let it run with adaware and spybot (you can trust them more) and then you should now you compromised your system is.

if it isn't compromised, your aluria was F/P'ing and you can keep that file.

Inf.

Blackspear
January 29th, 2005, 06:22 PM
For security products, you may want to take a look HERE (http://www.wilderssecurity.com/showthread.php?t=62972). As well there are discussions HERE (http://www.wilderssecurity.com/showthread.php?t=45284&page=1&pp=25) and even more HERE (http://www.wilderssecurity.com/showthread.php?t=43117).

Hope this helps...

Let us know how you go.

Cheers ;D

Michael__aust
January 30th, 2005, 11:34 AM
Thanks for the reply but I'm not really sure what you mean. I dont use Netscape so should i keep it as it is or restore it anyway?

Bubba
January 30th, 2005, 11:41 AM
{QUOTE-> I dont use Netscape so should i keep it as it is or restore it anyway? <-QUOTE}Hey Michael,

Are you by chance using Mozilla ?

Michael__aust
January 30th, 2005, 11:48 AM
nope im only running Aol browser/IE i know aol uses IE. Yeh but no Im not using mozilla i know i should be but i dotn have it at the moment.

ps thanks fior the help with my coolwebsearch post Bubba.

Bubba
January 30th, 2005, 12:06 PM
{QUOTE-> Yeh but no Im not using mozilla i know i should be but i dotn have it at the moment. <-QUOTE}Oh....I'm not asking you to switch....I just know that Mozilla also utilizes\creates WINDOWS\nsreg.dat and was just wondering if that's how nsreg.dat got on your PC.

Have you noticed anything out of the ordinary since removing nsreg.dat ?
If not....I'd keep trucking until something causes a problem and you can then question if the problem is nsreg.dat ?

Michael__aust
January 30th, 2005, 12:11 PM
I dont thibk thgere are an problems. If there are I have not noticed any. I know this is slightly off topic but i have spyware guard installed and just downloaded spybot last night because i dotn realy trsut aol spyware now after this incident and spybot includes all that tea timmer stuff and some other protection shpuld i isntall and enable them all or would this conflict with spyware guard. sorry for it beign off topic.

Thansk for all the help i'd be stuck without you guys and gals.

Bubba
January 30th, 2005, 12:44 PM
{QUOTE-> II know this is slightly off topic but i have spyware guard installed and just downloaded spybot last night because i dotn realy trsut aol spyware now after this incident and spybot includes all that tea timmer stuff and some other protection shpuld i isntall and enable them all or would this conflict with spyware guard. <-QUOTE}IMHO....the quality and protection of TeaTimer and SpywareGuard are fairly equal....to me it's a toss up.

As for your reference to Spybot "and some other protection"....if you are speaking of it's Immunization Feature....I'll list the three functions\protection it provides with comments.


1. ActiveX protection....while the quality\database is improving....it does not provide as good of protection as Javacools SpywareBlaster (http://www.javacoolsoftware.com/spywareblaster.html) ActiveX protection.

2. Cookie protection....while the quality\database is improving....it does not provide as good of protection as Javacools SpywareBlaster Cookie protection.

3. Restricted Sites protection....while the quality\database is improving....it does not provide as good of protection as Javacools SpywareBlaster Restricted Sites protection or definetly as good of protection as IE-Spyad (http://www.spywarewarrior.com/uiuc/resource.htm#IESPYAD).

Michael__aust
January 30th, 2005, 03:29 PM
what about its browser helper thing. On the imunization screen at the bottom it says about blocking bad sites or something is it worth turning that on?

snowbound
January 30th, 2005, 03:38 PM
{QUOTE-> what about its browser helper thing. On the imunization screen at the bottom it says about blocking bad sites or something is it worth turning that on? <-QUOTE}

IMHO yes, that option should be enabled. Also choose to block silently unless u want to see alerts everytime it blocks something.

Michael__aust
February 1st, 2005, 03:11 PM
Is it ok to have tea timer andspyware guard running at the same, or will they conflict with each other and cause problems?

snowbound
February 1st, 2005, 07:39 PM
{QUOTE-> Is it ok to have tea timer andspyware guard running at the same, or will they conflict with each other and cause problems? <-QUOTE}

I don't run TeaTimer but according to TopperID, post #14, in this thread,

http://www.wilderssecurity.com/showthread.php?t=55991

there seems to be none.



snowbound

Blackspear
February 1st, 2005, 07:43 PM
{QUOTE-> Is it ok to have tea timer andspyware guard running at the same, or will they conflict with each other and cause problems? <-QUOTE}I run both and have placed it on hundreds of PC's without an issue.

Hope this helps...

Cheers ;D