Ad-aware Update 1R227 25.10.2003

[Tim Richards]

"siljaline" <siljaline@null.com> wrote in message
news:ncklpvorn06qh0p1g5gqb37edv9vjkivcf@4ax.com...
http://www.lavasoftsupport.com/index...howtopic=13785

<snip>

Probably a FAQ but I've had one too many vodkas tonight so I can't be
bothered to check...........why is it that AdAware picks up a Media Player
related intrusion every time it runs on boot up?

So I tell it to delete the offending registry entry and, would you believe
it, next time I boot the offending entry is there again?

[siljaline]

On Sat, 25 Oct 2003 22:17:58 GMT, "Tim Richards" <tim.richards@freeuk.com> wrote:

>Probably a FAQ but I've had one too many vodkas tonight so I can't be
>bothered to check...........why is it that AdAware picks up a Media Player
>related intrusion every time it runs on boot up?
>
>So I tell it to delete the offending registry entry and, would you believe
>it, next time I boot the offending entry is there again?

Which Media Player?
Ad-aware doesn't flag any legitimate Media Players, SpyBot will flag MRU's by not
Ad-aware.


--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

[Tim Richards]

"siljaline" <siljaline@null.com> wrote in message
news:d00mpvor2jpolca6rve85456tc4f2kl9ms@4ax.com...
On Sat, 25 Oct 2003 22:17:58 GMT, "Tim Richards" <tim.richards@freeuk.com>
wrote:

>Probably a FAQ but I've had one too many vodkas tonight so I can't be
>bothered to check...........why is it that AdAware picks up a Media Player
>related intrusion every time it runs on boot up?
>
>So I tell it to delete the offending registry entry and, would you believe
>it, next time I boot the offending entry is there again?

Which Media Player?
Ad-aware doesn't flag any legitimate Media Players, SpyBot will flag MRU's
by not
Ad-aware.


--
siljaline


obj[0]=RegData : Software\Microsoft\MediaPlayer\Player\Settings

is what gets quarantined

[siljaline]

On Sun, 26 Oct 2003 07:05:08 GMT, "Tim Richards" <tim.richards@freeuk.com> wrote:

>obj[0]=RegData : Software\Microsoft\MediaPlayer\Player\Settings
>
>is what gets quarantined

Me thinks that an "MRU" - most recently used - as what the Lavasoft gang would call data
mining - best bet is to post a thread at Lavasoft Support.

Might be a false-flag, Tim and nothing to worry about.
Take it out of quarantine, run another scan and see if it gets flagged, detected again.

HTH


--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

[Tim Richards]

"siljaline" <siljaline@null.com> wrote in message
news6vmpvoh3uveaekt9j4vru2padjab4jbo4@4ax.com...
On Sun, 26 Oct 2003 07:05:08 GMT, "Tim Richards" <tim.richards@freeuk.com>
wrote:

>obj[0]=RegData : Software\Microsoft\MediaPlayer\Player\Settings
>
>is what gets quarantined

Me thinks that an "MRU" - most recently used - as what the Lavasoft gang
would call data
mining - best bet is to post a thread at Lavasoft Support.


have done.....thanks for the input - I use Window Washer though so the MRU
shouldn't apply. You're right, though, about how Lavasoft see it as a data
miner:

Vendor:Windows
Categoryata Miner
Object Type:RegData
Size:-
Location:Software\Microsoft\MediaPlayer\Player\Set tings "Client ID" ()
Last Activity:26-10-2003
Risk LevelLow
Comment:MediaPlayer Unique ID
Description:No Detail Information Available.

[siljaline]

On Sun, 26 Oct 2003 13:04:18 GMT, "Tim Richards" <tim.richards@freeuk.com> wrote:

>
>"siljaline" <siljaline@null.com> wrote in message
>news6vmpvoh3uveaekt9j4vru2padjab4jbo4@4ax.com...
>On Sun, 26 Oct 2003 07:05:08 GMT, "Tim Richards" <tim.richards@freeuk.com>
>wrote:
>
>>obj[0]=RegData : Software\Microsoft\MediaPlayer\Player\Settings
>>
>>is what gets quarantined
>
>Me thinks that an "MRU" - most recently used - as what the Lavasoft gang
>would call data
>mining - best bet is to post a thread at Lavasoft Support.
>
>
>have done.....thanks for the input - I use Window Washer though so the MRU
>shouldn't apply. You're right, though, about how Lavasoft see it as a data
>miner:
>
>Vendor:Windows
>Categoryata Miner
>Object Type:RegData
>Size:-
>Location:Software\Microsoft\MediaPlayer\Player\Se ttings "Client ID" ()
>Last Activity:26-10-2003
>Risk LevelLow
>Comment:MediaPlayer Unique ID
>Description:No Detail Information Available.
>
>
Hi Tim,

Glad to help, this NG *works* :-)

Cheers from Canada -


--
siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_