View Single Post
Old 05-04-2007, 07:12 AM   #13 (permalink)
Keradon
Registered User
 
Join Date: Apr 2007
Posts: 27
OS: Windows XP


Re: Viewpoint/Grokster keep reappearing

Dialer HC had these entries:

Key: hkey_current_user\software\microsoft\windows\currentversion\internet settings\zonemap\domains\xxx-content.name
Key: hkey_current_user\software\microsoft\windows\currentversion\internet settings\zonemap\domains\adslconnection.name
Key: hkey_current_user\software\microsoft\windows\currentversion\internet settings\zonemap\domains\softlab.name

Trojan.RegFish.A had these entries:
Key: hkey_current_user\software\microsoft\windows\currentversion\internet settings\zonemap\domains\phishingfix.biz
Key: hkey_current_user\software\microsoft\windows\currentversion\internet settings\zonemap\domains\dettaglio.biz

Trymedia:
Key: hkey_local_machine \software\trymedia systems.

The TryMedia I expected, because my wife sometimes downloads those trial games from Yahoo. The Dialer and Trojan...yeah those were unexpected. Other than the registry listings, it did not give any information about where they were located among the file directories.

Due to time constrains, I was not able to complete a Panda Active Scan last night. I'll try to do one again tonight.
Keradon is offline