Is it safe to do it?

[DarkButterfly]

I was wondering if it would be safe to set kill-bits with the created CLSIDS we often see on the reports in www.threatexpert.com?

Or would it damage the system?

Regards

[mjq424]

Hi
If you use Spyware Doctor, it will already have set killbits for the malicious ActiveX CLSIDs as part of Immunizer Guard. Spybot S&D and SpywareBlaster do something similar too. Microsoft often releases killbits as part of Windows Updates if a 3rd party software company requests it. All of these combined make it less necessary to create your own killbits. If you do set your own killbits it will disable any program that tries to use that identical CLSID, so it shouldn't kill the system.
Hope that helps

[DarkButterfly]

Hi
If you use Spyware Doctor, it will already have set killbits for the malicious ActiveX CLSIDs as part of Immunizer Guard. Spybot S&D and SpywareBlaster do something similar too. Microsoft often releases killbits as part of Windows Updates if a 3rd party software company requests it. All of these combined make it less necessary to create your own killbits. If you do set your own killbits it will disable any program that tries to use that identical CLSID, so it shouldn't kill the system.
Hope that helps

Thanks for the feeback.

I do make use of Spybot and SpywareBlaster. They're a great combo. But, I wondered - Why wait for others to give updates on that, leaving a possible open window?

So, I decided to ask, to the more experienced people, if it would be ok or not to do it so.

Is is that common for a malware to share the same CLSID/CLSIDS with a safe app?

Regards

[mjq424]

Hi
Some malware picks random CLSIDs which could inevitably coincide with another program. The killbits that protection programs and Microsoft offer are pretty much as up-to-date as you need to be. ActiveX (drive-by-downloads) are not used as frequently as they used to be with the advent of SQL injection and hidden IFRAME usage in website attacks. You are much better off using a browser other than Internet Explorer (like Firefox) and if you use Firefox I highly recommend NoScript and AdBlocker Plus to deal with scripting and advert based attacks.
Hope that helps