Hidden in BookMarks

[T.C.]

Win XP HE SP.3+

A routine Spybot scan came up with:


The cure seems to be to find/delete them in Bookmarks, is there a way to Search bookmarks for the entries, the only suggestion so far is to hover over each bookmark, an onerous job when hundreds of bookmarks are involved.

Thanks

[evilfantasy]

You need to update your bookmarks. The original owner of spywareinfo.com disappeared. The bill wasn't paid and in turn the URL was sold by GoDaddy to the highest bidder and is now an attack site. Let Spybot fix those entries.

The new URL is www.spywareinfoforum.com

[T.C.]

Thank you EvilF.  I already have that info from various web searches but SpyBot will NOT fix the entries.  The latest info I have is from the posts by SpybotSandra on the Spybot forum here.. and from tbone here.

AFAIK I have never bookmarked Spywareinfo.com and it seems the only way to remove the entries is manually.  Being lazy all I need is a method of searching F'Fox bookmarks for the relevant entries.

[evilfantasy]

Download Registry Search by Bobbi Flekman
(see the link titled RegSearch Download Link)

* Extract the files from Regsearch.zip into a folder.
* Doubleclick regsearch.exe to start the program.
* Enter Spywareinfo in the top area of the form and then click OK
* Notepad will be opened with text in it (the file named RegSearch.txt will be saved in the program's folder as well).
* Add the contents of the Notepad file to your next reply.

[T.C.]

Thanks again.  Here's the result of the Reg Search.

Windows Registry Editor Version 5.00

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.6.0

; Results at 29-09-2009 16:19:11 for strings:
;  'spywareinfo'
; Strings excluded from search:
;  (None)
; Search in:
; Registry Keys  Registry Values  Registry Data 
; HKEY_LOCAL_MACHINE  HKEY_USERS 


[HKEY_USERS\S-1-5-21-1123561945-1592454029-682003330-1004\Software\Update\Locate32\Dialogs]
"Name/Name"="spywareinfo.com"
"Advanced/ContainData"="spywareinfo"

[HKEY_USERS\S-1-5-21-1123561945-1592454029-682003330-1004\Software\Update\Locate32\Recent Strings]
"Name0"="spywareinfo.com"

; End Of The Log...

There was no opportunity to enter this to the "next reply" as Regsearch went into Not Responding on two runs and had to be aborted on both occasions.

The Reg entries obviously exist, should I delete them using Regedit?

I exported FFox bookmarks and used the Search feature in Edit.com to locate all 7 occurrences of Spywareinfo and manually deleted the entries from bookmarks.  A rerun of Spybot shows all clear.

[evilfantasy]

Yes but just delete the spywareinfo entries on the right side of the window in regedit.

Now empty the recycle bin, restart the computer and see if Spybot is still finding anything.

[T.C.]

Done.   Also ran Reg Search again with the result:

Windows Registry Editor Version 5.00

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.6.0

; Results at 30-09-2009 12:59:16 for strings:
;  'spywareinfo'
; Strings excluded from search:
;  (None)
; Search in:
; Registry Keys  Registry Values  Registry Data 
; HKEY_LOCAL_MACHINE  HKEY_USERS 


; End Of The Log...

SpyBot found no threats.

Earlier I posted

AFAIK I have never bookmarked Spywareinfo.com

but I must have done at some time.  Sorry about the confusion.

Thank you for your guidance EvilF.

T.C.

[evilfantasy]

Glad you got them removed.