Does this Registry Key Indicate CWS.Googlems?

Discussion in 'adware, spyware & hijack cleaning' started by me, Feb 22, 2004.

Thread Status:
Not open for further replies.
  1. me

    me Registered Member

    Joined:
    Feb 10, 2002
    Posts:
    33
    Location:
    New Baden, IL
    HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\xxxtoolbar.com,na,na,02/22/2004,00-E0-29-93-01-76,USA

    The reason I'm asking is because a PestPatrol (PP) scan said it's a sign of cws.googlems.3. I suspect that it's a false positive because I'm not experiencing any symptoms of cws.googlems, nor for that matter, symptoms of any browser shenanigans. Also I've run merijn.org's CWSShredder1491 which told me my PC was clean.

    I'm awaiting a PP support response to my email which included a copy of my master scan log and I will post their reply when I receive it. In the mean time I'm hoping that one of the Wilder's experts can reassure me that I have nothing to worry about.

    NOTE: I don't wish to start a round of PestPatrol bashing.
     
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
    Hi me,

    That would depend on the value of that key.
    And, without bashing, PestPatrol is not the only software known to forget and check that.
    If you are running any software that puts untrustworthy sites in your restricted zone, I dare say you have nothing to worry about.

    Regards,

    Pieter
     
  3. me

    me Registered Member

    Joined:
    Feb 10, 2002
    Posts:
    33
    Location:
    New Baden, IL
    Hi Peter and Thanks,

    The value is 4 and indeed I've previously run ie-spyad.exe which put a long list of untrustworthy sites in my IE restricted zone.
     
  4. FanJ

    FanJ Guest

    Yep, I've got something similar.
    I posted somewhere here about it.
    I have to try to find the link.
    I am now waiting for over a week for a reply from the PP folks.
    In the past I pointed something similar already too to them.
     
  5. FanJ

    FanJ Guest

    OK, here is the link:

    http://www.wilderssecurity.com/showthread.php?t=21940
     
  6. me

    me Registered Member

    Joined:
    Feb 10, 2002
    Posts:
    33
    Location:
    New Baden, IL
    Hi Fanj,

    Thanks for the link and sorry that I didn't do my homework better and search before starting a new thread on this issue.
     
  7. FanJ

    FanJ Guest

    Hi Me,

    You're welcome !
    No problem with starting this thread !

    Cheers, Jan.
     
Thread Status:
Not open for further replies.