Results 1 to 11 of 11
  1. #1
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Unknown Registry Entry

    I was poking around the registry the other day and came across something that got me curious. Anybody know anything about an entry that looks like this....

    HKEY_CURRENT_USER/Software/Aureate/Advertising/Cookies
    -doubleclick, -flycast, -imigis,/Demographics

    Is this some form of spyware or something the advertisers themselves put there?? Is it necessary / required?? Can I remove it?? Any help or ideas are welcome.
    Thanks. <img src=/S/bow.gif border=0 alt=bow width=15 height=15>
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  2. #2
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Northern, California, USA
    Posts
    1,886
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unknown Registry Entry

    Hmm.. that's an interesting one..

    If you really want to find out, back up your registry in regedit, and give it a whirl! <img src=/S/smile.gif border=0 alt=smile width=15 height=15>

    I suspect it's something you aquired in your travels which isn't necessary, (I don't have that key in my computer...) and that deleting wont have any effect... The key is to backup your reg before playing around in it tho.. (I've seen hardware fried as a result of messing w/ the wrong key..) <img src=/S/wink.gif border=0 alt=wink width=15 height=15>
    <IMG SRC=http://www.wopr.com/w3tuserpics/Kel_sig.gif>
    Moderator:<font color=448800> Pix Place, Internet Explorer</font color=448800>
    <small>www.kvisions.com

  3. #3
    3 Star Lounger
    Join Date
    Dec 2000
    Location
    La Verne, California, USA
    Posts
    313
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unknown Registry Entry

    Doc,

    I share your suspicion! Try exploring Gibson Research website and see what they might have on that.
    <A target="_blank" HREF=http://www.grc.com>http://www.grc.com</A> <img src=/S/lightbulb.gif border=0 alt=lightbulb width=15 height=15>

  4. #4
    Bronze Lounger
    Join Date
    Feb 2001
    Location
    England
    Posts
    1,306
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unknown Registry Entry

    Aureate (name now changed) is one of the notorious spyware pluggers. The trojan it implants will have been sending details of your browsing habits to its masters ever since it infected you. Get AdAware (which will remove the infection) and yes, you can safely delete it from your Registry. However, if you don't also get rid of whatever is putting it there, it will come back.
    You can get AdAware from my website <A target="_blank" HREF=http://www.mercury.org.uk/dnlds5.htm#mark4>#61</A> or click on the blue part of my sig line.

  5. #5
    Plutonium Lounger Leif's Avatar
    Join Date
    Dec 2000
    Location
    U.K.
    Posts
    14,010
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unknown Registry Entry

    Mel,
    Will AdAware run on W2K? The shortcut to lavasoft seems dead...
    TIA

  6. #6
    Bronze Lounger
    Join Date
    Feb 2001
    Location
    England
    Posts
    1,306
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unknown Registry Entry

    Yup. That's the OS I run it on. And yes, the links I know of for Lavasoft have died - but you can still get AdAware from my site, as I offer it from my own storage. (I haven't cancelled their homepage link I have there in case it comes back). If you run AdAware you should know that if you remove the ads from some apps (eg the free version of Go!Zilla) they stop working and will need re-installing.
    Rgds

  7. #7
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: Unknown Registry Entry

    Many thanks to all who replied.
    Drk, you're a wonder!! Talent & Brains as well!! <img src=/S/thinks.gif border=0 alt=thinks width=15 height=15> <img src=/S/yep.gif border=0 alt=yep width=15 height=15>
    Preston, Steve's site was an excellent suggestion. <img src=/S/lightbulb.gif border=0 alt=lightbulb width=15 height=15> Made a quick stop and will be going back tonight when I've got more time.
    MerC, THE MAN!! <img src=/S/trophy.gif border=0 alt=trophy width=15 height=15> <img src=/S/trophy.gif border=0 alt=trophy width=15 height=15> Visited your home and grabbed a copy of AdAware. Goin' Gremlin hunting later! <img src=/S/cauldron.gif border=0 alt=cauldron width=20 height=20>Gonna find 'em and cook 'em and eat 'em !! <img src=/S/devil.gif border=0 alt=devil width=15 height=15>
    Thanks again. <img src=/S/bow.gif border=0 alt=bow width=15 height=15>
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  8. #8
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: Unknown Registry Entry

    MerC,
    Could this have been put there by the free version of CuteFTP?? I haven't used it much since I found Napster. Also, would ZoneAlarm pickup the outgoing trafic from the underlying trojan ??
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  9. #9
    Bronze Lounger
    Join Date
    Feb 2001
    Location
    England
    Posts
    1,306
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unknown Registry Entry

    Hi
    CuteFTP is freeware iirc, but I wasn't aware it was that naughty. Does it have ads attached to it

  10. #10
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: Unknown Registry Entry

    Many thanks for the advice and the program !! Nice little piece of software. Unobtrusive, does what it says it will.. what more can you ask of software ?? Ad-Aware found 4 registry keys affected HKEY_USERS, HKEY_CLASSES_ROOT, HKEY_LOCAL_MACHINE, and HKEY_CURRENT_USER all had an aureate entry in the software string and 1 file in the Windows/System folder (advert.dll). Ad-Aware cleared them all and left me squeaky clean !!
    I'm gonna have to spend more time here. Beats the He** out of tech support. Faster too !!! My compliments to all of Woody's merry men and ladies (that's for you Eileen)!!!!

    BTW - MerC, CuteFTP does run ads if you don't register it in 30 days. And as to ZoneAlarm, I have been very selective about what I let past the gate and only a small select group is allowed free access to the outside world. Only one request I didn't recognize that came up kinda regular. Don't recall what program was asking but when I first hook into the internet every so often something wanted to contact IBM.com, but I never OK'd it. I'm curious if this might have been it? We'll see. Thanks again.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  11. #11
    Plutonium Lounger Leif's Avatar
    Join Date
    Dec 2000
    Location
    U.K.
    Posts
    14,010
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: AdAware/lavasoft

    Mel,
    lavasoft back on line with a new version!
    **
    Thanks for the tip. Got it and run it - no surprises (yet) but handy to have.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •