CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Restored item from quarantine - disappeared!

 
Post new topic   Reply to topic       All -> FavForums -> Zone Alarm [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
gorgelink

Sergeant
Sergeant


Joined: Dec 02, 2004
Posts: 75
Location: USA

PostPosted: Thu Aug 10, 2006 9:51 am    Post subject: Restored item from quarantine - disappeared!
Reply with quote

Hi,

THE PROBLEM

Yesterday, following an antispyware manual scan, ZAP quarantined a registry entry.

I then restored the quarantined registry entry.

ZAP informed me that "restore was successful".

Following the restore, the item indeed disappeared from the quarantine tab.

This morning I did regedit and discovered that the registry entry that was quarantined by ZAP antispyware was NOT restored. It is not in the registry.

POSSIBLE SOLUTION?

In the registry I found this registry key:

...SOFTWARE/ZoneLabs/SreRemoval/Registries/(a key with a long string of letters as its value - I will call it KEY1)

KEY1 had a long string of letters as its value. The data of KEY1 is the missing item that was not restored.

Can I use KEY1 to restore the missing item?

HELP NEEDED

Any ideas what to do? How can I restore this missing item to the registry? Now I cannot find it in the quarantine tab OR in the registry!

ZAP antispyware told me that it restored the quarantined item - but evidently it did not. How is this possible at all? Playing like that with the registry is a dangerous game!

Does ZAP antispyware have a quarantine folder somewhere? I cannot find it.

I don't know what to do!

Thank you everyone for being there and for helping out.

G.

Back to top
View users profile Send private message
Hoov

Zone Alarm Host
Zone Alarm Host
PIRT Handler

Joined: Jun 21, 2002
Posts: 4613
Location: USA
1st Responders Phishing Squad Premium RootKit Detection Hosts Rootkit Responders Team F@H

PostPosted: Thu Aug 10, 2006 6:47 pm    Post subject:
Reply with quote

How often does a scan occur? DO you have the spyware scanner setup to automatically repair when a problem is found?

What was this key in reference to? What is the value of what you call key1? It is probably a CLSID and if it is, it can be looked up to see what it is, and that would tell us where to go next.


_________________
For ZoneAlarm help http://www.donhoover.net
Back to top
View users profile Send private message Send email Visit posters website
gorgelink

Sergeant
Sergeant


Joined: Dec 02, 2004
Posts: 75
Location: USA

PostPosted: Fri Aug 11, 2006 1:49 pm    Post subject: Repaired
Reply with quote

Thanks a bunch, Hoov.

I succeeded to import this key from another computer of mine (it's an HKLM Component Category key - Internet explorer Browser Communications Band").

Have a cool summer.

G.

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Zone Alarm All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer