a squared trace- registry pc prowler

mr techni · Apr 30, 2007

iv just finished doing a spy scan on my pc when a warning noise came from my comp.
so i did a squared to find out what the problem was. and the first thing that came up is registry prowler .
after looking it up on google im still none the wiser
as it seem to be outlook extension of some sort.
and a squared seem to think its a medium risk but a an anti hacker or spyware at the same time. leaving me confused.
both my search and destroy and my avg were clear untill now.
can you fill me in

chaslang · May 1, 2007

Please attach a log that shows exactly what was found and where it was found.

mr techni · May 2, 2007

i dont have the log sorry.
but i have managed to write the down the location as it hasnt been erased yet. untill i know more about it.
the location
HKEY_LOCAL_MACHINE/SOFTWARE/MICROSOFT/EXCHANGE/CLIENT/EXTENSION
---->OUT LOOK SETUP EXTENSION.

CLASSIFIED AS A TRACE REGISTRY PC PROWLER

MEDIUM RISK

chaslang · May 2, 2007

You mean EXTENSIONS not EXTENSION. That is still a valid registry key. I need to know exactly what is in the Outlook Setup Extension subkey which is also a valid key. See: http://www.microsoft.com/technet/archive/exchangeserver55/maintain/automate.mspx?mfr=true

What program/scanner is declaring the problem?

Copy and paste the below into the Start, Run box and click OK.

reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\Client\Extensions" c:\regkey.txt

Now attach the c:\regkey.txt file here.

mr techni · May 2, 2007

hi there.
answer to the first question = a squared maleware scanner
the regkey.txt file is enclosed

chaslang · May 2, 2007

That is a valid registry key as shown in the link I gave you and also in this link too:

http://msdn.microsoft.com/archive/default.asp?url=/archive/en-us/dnarout98/html/msdn_outextend.asp

A-Squared is wrong!

mr techni · May 3, 2007

thanks for your help .
i just recently received a reply from a squared 2 day confirming it as a false positive

chaslang · May 3, 2007

mr techni said: ↑

thanks for your help .
i just recently received a reply from a squared 2 day confirming it as a false positive
Click to expand...

Well I'm happy to hear they agree with me!

You're welcome.

Log in or Sign up

a squared trace- registry pc prowler

mr techni Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

mr techni Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

mr techni Private E-2

Attached Files:

regkey.txt

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

mr techni Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member