Registry Residuals

minorgeek2 · May 20, 2006

Was wondering if it was normal to have residuals in you registry after finding and deleting malware.
I am running XP SP2 with the following.
CPIF - Check Point Integrity Flex
Ad-Aware SE plus
STOPzilla
Symantrics Client Security

I ran through the READ ME procedure in safe mode and could not find any problems. After rebooting STOPzilla blocked CWS.cassadra and a few other minor things. I allowed STOPzilla to delete what it found but when I went to regedit I found a ton of sites listed under Domains in the Internet Explorer settings. I ran all the programs again and found nothing. IS THAT NORMAL?

DavidGP · May 20, 2006

The sites listed under Domains in the registry are generally linked to IE and found also listed in Tool > Internet Options > Privacy tab > Sites as allowed or Blocked.

they are added by software like Spywareblaster, Spybot S&D etc in a bid to stop these sites loading and installing malware on your PC.

Do a check of the Privacy settings in IE and see if they are all listed as Blocked?

minorgeek2 · May 20, 2006

10-4. Thanks for the update. Will check when I get a chance.

minorgeek2 · May 21, 2006

I checked and some of them are and some of them are not listed. There is also stuff listed in the History file of regedit. Is that normal also?

chaslang · May 22, 2006

Yes that's all normal! Ignore StopZilla and its complaints about items in the Domains registry keys. They are all FALSE. StopZilla does not know the difference between bad things and good things that were put in the registry to protect you.

minorgeek2 · May 22, 2006

Thanks for the update.

Log in or Sign up

Registry Residuals

minorgeek2 Private E-2

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

minorgeek2 Private E-2

minorgeek2 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

minorgeek2 Private E-2