[christos1 adware cleaner]

Thanks for the help exile360

[christos1 adware cleaner]

On 10/4/2018 at 1:07 PM, exile360 said:

If you use the Immunize function in Spybot Search & Destroy or Spywareblaster then these are false positives.  You can verify this by checking the registry entries.  If they show the value data as 4 then they are FPs as zone 4 is the restricted zone.  

You can learn more by reviewing the information on this page.

If these entries were set to 2, meaning the trusted zone, then they would not be false positives, however there has been a longstanding known issue with ADWCleaner detecting these types of entries.  Most were corrected in the last 2 releases however it appears that some of them still linger (assuming they are configured to 4 on your system).

The following is a quote from the Microsoft page linked above:

 

 

[christos1 adware cleaner]

Thanks for the responce having looked in the registry and following exile 360 advice it looks like these are false positives in the registry i found

qwertysearch123.biz   Name        Type                             Data

                                          ab               Reg_S2                     (value not set)

                                         011              Reg_DWORD              0x0000004 (4)

                                         110

Not sure if this is any use as i am not really computer literate

[christos1 adware cleaner]

Th

On 10/4/2018 at 10:01 AM, Elisabeth said:

Hi,

Can you share the content of those registry keys? You can PM me if you prefer.

Thanks!

 

[christos1 adware cleaner]

should I restore these registry items found by adware cleaner

***** [ Registry ] *****

Adware.StartPage                HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\qwertysearch123.biz
Adware.StartPage                HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\quertysearch123.biz
Adware.StartPage                HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\qwertysearch123.biz
Adware.StartPage                HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\quertysearch123.biz
Adware.StartPage                HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\qwertysearch123.biz
Adware.StartPage                HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\quertysearch123.biz