Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

A-squared Free Goverlanv6 Issue


  • Please log in to reply
11 replies to this topic

#1 chapin33

chapin33

  • Members
  • 59 posts
  • OFFLINE
  •  
  • Location:CA
  • Local time:07:36 AM

Posted 20 July 2007 - 12:39 PM

Good morning...

Somewhat new here. I came in looking for something that talks about trace.registry.GoverLANv6. I just ran my a-squared Free 3.0 scan and it came back with this flagged. Not knowing what it was, I quarantined it. I am unsure if I should delete or simply have it remain in quarantine? Please advise. Here is the information:

-squared Free - Version 3.0
Last update: 7/19/2007 5:45:08 PM

Scan settings:

Objects: Memory, Traces, Cookies, C:\WINDOWS\, C:\Program Files
Scan archives: On
Heuristics: On
ADS Scan: On

Scan start: 7/20/2007 8:59:48 AM

Value: HKEY_CLASSES_ROOT\CLSID\{399CB6C4-7312-11D2-B4D9-00105A0422DF}\InprocServer32 --> ThreadingModel detected: Trace.Registry.GoverLAN v6
Value: HKEY_CLASSES_ROOT\CLSID\{959F94FD-DD1E-11D2-B559-00105A0422DF}\InprocServer32 --> ThreadingModel detected: Trace.Registry.GoverLAN v6
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{399CB6C4-7312-11D2-B4D9-00105A0422DF}\InprocServer32 --> ThreadingModel detected: Trace.Registry.GoverLAN v6
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{959F94FD-DD1E-11D2-B559-00105A0422DF}\InprocServer32 --> ThreadingModel detected: Trace.Registry.GoverLAN v6
C:\Documents and Settings\Jo Ann\Cookies\jo_ann@linksys[2].txt detected: Trace.TrackingCookie

Scanned

Files: 27713
Traces: 285571
Cookies: 37
Processes: 37

Found

Files: 0
Traces: 4
Cookies: 1
Processes: 0
Registry keys: 0

Scan end: 7/20/2007 9:18:37 AM
Scan time: 12:18:49 AM

C:\Documents and Settings\Jo Ann\Cookies\jo_ann@linksys[2].txt Quarantined Trace.TrackingCookie
Value: HKEY_CLASSES_ROOT\CLSID\{399CB6C4-7312-11D2-B4D9-00105A0422DF}\InprocServer32 --> ThreadingModel Quarantined Trace.Registry.GoverLAN v6
Value: HKEY_CLASSES_ROOT\CLSID\{959F94FD-DD1E-11D2-B559-00105A0422DF}\InprocServer32 --> ThreadingModel Quarantined Trace.Registry.GoverLAN v6
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{399CB6C4-7312-11D2-B4D9-00105A0422DF}\InprocServer32 --> ThreadingModel Quarantined Trace.Registry.GoverLAN v6
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{959F94FD-DD1E-11D2-B559-00105A0422DF}\InprocServer32 --> ThreadingModel Quarantined Trace.Registry.GoverLAN v6

Quarantined

Files: 0
Traces: 4
Cookies: 1

BC AdBot (Login to Remove)

 


m

#2 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:11:36 AM

Posted 20 July 2007 - 01:06 PM

Don't know if you installed it, but it is legitimate software
Here's a descrition from their site:
pjtech.com
Mark
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 chapin33

chapin33
  • Topic Starter

  • Members
  • 59 posts
  • OFFLINE
  •  
  • Location:CA
  • Local time:07:36 AM

Posted 20 July 2007 - 03:22 PM

Thanks so much for the reply. I did not knowingly install this software. I am thinking since it a legit software but since I did not install it, I should delete it instead os leaving it in quarantine? Thoughts?

#4 oldf@rt

oldf@rt

  • Members
  • 2,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Avondale, Arizona USA
  • Local time:08:36 AM

Posted 20 July 2007 - 03:26 PM

If this is a company laptop, leave it alone.
The name says it all -- 59 and holding permanently

**WARNING** Links I provide might cause brain damage

#5 chapin33

chapin33
  • Topic Starter

  • Members
  • 59 posts
  • OFFLINE
  •  
  • Location:CA
  • Local time:07:36 AM

Posted 20 July 2007 - 03:56 PM

this is not a company lap top. Rather it is my own personal desktop PC. Does that matter?

#6 oldf@rt

oldf@rt

  • Members
  • 2,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Avondale, Arizona USA
  • Local time:08:36 AM

Posted 20 July 2007 - 04:58 PM

Absolutely, sometimes companies add remote administration/control software. Since it is yours, it could have been added by someone other than you who has or had access to the computer.

See if there is an add/remove programs entry, and try to uninstall it that way.
The name says it all -- 59 and holding permanently

**WARNING** Links I provide might cause brain damage

#7 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:11:36 AM

Posted 20 July 2007 - 05:00 PM

Yeah it matters. It could have been installed by a workplace's IT department for their use
Mark
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#8 chapin33

chapin33
  • Topic Starter

  • Members
  • 59 posts
  • OFFLINE
  •  
  • Location:CA
  • Local time:07:36 AM

Posted 20 July 2007 - 06:23 PM

thanks for clarifying that it would matter between a desktop and lap top. this is definitely on the personal desktop. I did as instructed and looked to see if there was anything via add/delete and there is nothing there. I at least have it quarantined. I did go into an a-squared forum and posted. One answered but between a very weird answer, I conclude that it may be a false positive. But from the comment listed, I am not too sure to trust it. Here is the log for that site:

http://forum.emsisoft.com/Default.aspx?g=posts&t=2401

#9 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:11:36 AM

Posted 20 July 2007 - 07:59 PM

Odd responses to say the least, but I'd do as he recommended and leave it quarantined and check back every so often
Mark
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#10 chapin33

chapin33
  • Topic Starter

  • Members
  • 59 posts
  • OFFLINE
  •  
  • Location:CA
  • Local time:07:36 AM

Posted 24 July 2007 - 10:59 AM

Thanks for the follow-up comments here. I will keep it in quarantine but also wanted to share with the folks here that are many comments on the a-squared Free forum since I first posted my situation there too.

Here's the update: http://forum.emsisoft.com/Default.aspx?g=posts&t=2401

#11 chapin33

chapin33
  • Topic Starter

  • Members
  • 59 posts
  • OFFLINE
  •  
  • Location:CA
  • Local time:07:36 AM

Posted 27 July 2007 - 01:07 PM

Unlike the people who post and assist in the forumn, the a-Squared forumn really does not seem to be as helpful. Here is the lastest information:

http://forum.emsisoft.com/Default.aspx?g=p...2877&#12877

After, reviewing this information if anyone can further assist me I would be most grateful. I have done as directed and left the items in quarantine but don't like leaving them there if not needed. Please note that my comments in the other forumn are listed under the name "JAC". Thanks...

#12 oldf@rt

oldf@rt

  • Members
  • 2,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Avondale, Arizona USA
  • Local time:08:36 AM

Posted 27 July 2007 - 11:58 PM

I reread the entire post that you referenced according to A Squared, it is a "false positive", and they are working on fixing it.
The name says it all -- 59 and holding permanently

**WARNING** Links I provide might cause brain damage




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users