 dpPremium,MVM
join:2000-12-08
Greensburg, PA
kudos:7 | False Postive in latest Ad-Aware Release? If one has 'about:blank' set as there Start Page, AAW6 is identifying this as a Possible Browser Hijaak.
Should this be considered a false positive?
Reference Number : 01R302 03.05.2004
Internal build : 234
File location : C:\PROGRAM FILES\AD-AWARE 6\reflist.ref
Total size : 1084405 Bytes
Signature data size : 1065901 Bytes
Reference data size : 18440 Bytes
Signatures total : 23910
Target categories : 10
Target families : 461
Possible Browser Hijack attempt RegData Vulnerability HKEY_CURRENT_USER:Software\Microsoft\Internet Explorer\Main"Start Page" ("about:blank") Possible browser hijack attempt
Possible Browser Hijack attempt RegData Vulnerability HKEY_USERS:.Default\Software\Microsoft\Internet Explorer\Main"Start Page" ("about:blank") Possible browser hijack attempt
--
Write your questions down on the back of a $20 dollar bill and send them to me |
|
 John2gQui Tacet ConsentitPremium
join:2001-08-10
England | said by dp:
Should this be considered a false positive?
Yup
I got the same fp. Added it to the "ignore" list.
--
Better to remain silent and be thought a fool, than to speak and remove all doubt. |
|
TabletPremium
join:2003-01-15
Czech | reply to dp
I get the same thing.. I've added these two items to the ignore list before it gets fixed. |
|
| reply to dp
No FP (false positives) here running with the most recent definitions released today, but I also don't have about: blank configured as my start page. |
|
John2gQui Tacet ConsentitPremium
join:2001-08-10
England | said by anthrorules:
No FP (false positives) here running with the most recent definitions released today, but I also don't have about: blank configured as my start page.
No surprises there then 
--
Better to remain silent and be thought a fool, than to speak and remove all doubt. |
|
|
|
 sechsPremium
join:2001-07-19
Left Coast | reply to dp
It's marked as "possible." It seems to me that there was something going around making your default home page "about:blank."
--
It's not what you know but who you know... |
|
Tdix05
join:2002-01-23
Staunton, VA | reply to dp
Got the same result after running new RefList.
Vendor:Possible Browser Hijack attempt
Category:Vulnerability
Object Type:RegData
Size:-
Location:Software\Microsoft\Internet Explorer\Main "Local Page" ("about:blank")
Last Activity:5-3-2004
Risk LevelMedium
Comment:Possible browser hijack attempt
Description:Possible attempt to control\redirect the browser. This object referrs to a "blacklisted" site. |
|
dpPremium,MVM
join:2000-12-08
Greensburg, PA
kudos:7 | reply to sechs
said by sechs:
It's marked as "possible." It seems to me that there was something going around making your default home page "about:blank."
I recall something about that as well and perhaps that's the reasoning for AAW6 to flag it. I just put it on the ignore list. I'm sure Aaron will be along with the reasoning behind it.
--
Write your questions down on the back of a $20 dollar bill and send them to me |
|
 martiColor outside the linesPremium,MVM
join:2001-12-14
Houston, TX
kudos:5 | Thanks dp  for the "heads up." I have "about:blank" set as my start page in IE6. I added it to the "ignore list." |
|
 ahulettLife Without WallsPremium,VIP
join:2003-02-02
Bellevue, WA
kudos:2
1 edit | reply to dp
I hate having to add this. But there are MANY CoolWebSearch items that use this, and if not added, it would result in the address bar search not working.
That's why it says Possible in the result. Those purposely setting about:blank in their settings can add it to their ignore-list.
Like I said... don't like this very much, but it's the only way to ensure 100% restoration for a user that had CWS change their settings.
Thanks,
Aaron
--
Aaron Hulett - Chief Research Officer | Lavasoft Research & Development | »www.lavasoft.de |
|
 hayc59Im Your HuckleberryPremium
join:2001-02-26
David R.I.P.
kudos:20 | thank you Aaron for the explaination!!
you da man:)
--
~9.11.01~~Never Forget~ |
|
KiwiPremium
join:2003-05-26
USA/MidWest
kudos:1
1 edit | reply to dp
Oops, covered.
--
2.66g/533fsb Intel CPU @ 3.28g
512meg Twinmos PC3700~466 DDR @ 2.8v
ATI 9500 Pro @ 9700 Pro@1.6v
AMD ASUS A7N8X-E
2500+@3200 ATI 9500 Pro, Corsair 512LL. |
|
