Spyware, Viruses, & Security forum

General discussion

Spybot result - is this a false positive?

by kindycat85 / June 5, 2008 2:57 AM PDT

Hi,

I ran a spybot s&d yesterday and this reared it's ugly head

Microsoft.Windows.Security.InternetExplorer

HKEY_USERS\S-1-5-21-1993962763-220523388-682003330-1004\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe

Is this spyware or a flase positive

thanks for all your help (premature I know)

penny

Post a reply
Discussion is locked
You are posting a reply to: Spybot result - is this a false positive?
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Spybot result - is this a false positive?
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
thats true
by jay128k / June 5, 2008 3:05 AM PDT

this is not the registry file of a normal version of windows
that file should not be there it looks like it was put there probably by a virus or spyware

Collapse -
I am NOT so sure, IF that is "true".....
by Marianna Schmudlach / June 5, 2008 4:15 AM PDT
In reply to: thats true

I just found a thread at SpybotS&D:

Microsoft.Windows.Security.InternetExplorer: [SBI $A3433CBF] Settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-240452933-1526793513-891911580-1006\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe

You are using a third part anti-virus and firewall.
So the Windows anti-virus and firewall are disabled.
That is being detected by Spybot and notified to you.
As these changes are made by yourself cause you are using these other programs you can safely ignore this entries in future scans.


http://forums.spybot.info/showthread.php?t=19942

Collapse -
many thanks marrianah
by kindycat85 / June 5, 2008 5:08 AM PDT

I just hope you haven't hijacked me and are now spending my millions Happy

Collapse -
You Are Welcome.....
by Marianna Schmudlach / June 5, 2008 7:05 AM PDT
In reply to: many thanks marrianah

NO worries..... I would prefer to SIT on your millions so it duplicates]:) But it makes sense to me, what I found at the Spybot forum...... IF you are in doubt....... I would suggest to post in the Spybot forum Wink

Collapse -
Spybot's Detections
by Bugbatter / June 14, 2008 11:28 AM PDT

These would be anti-virus and firewall detections:

Microsoft.WindowsSecurityCenter.AntiVirusDisableNotify: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0

Microsoft.WindowsSecurityCenter.FirewallDisableNotify: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0


The one in question:
Microsoft.Windows.Security.InternetExplorer: [SBI $A3433CBF] Settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-240452933-1526793513-891911580-1006\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe

pertains to a detection that Spybot added a while back because some downloaded toolbars were found to alter that setting which can affect a users "My Computer Zone" settings.

Open Internet Explorer > Tools > Internet options > Advanced tab > scroll down to "security". If "Allow active content to run in files on my computer" is checked, UNcheck it > Apply > OK.
Rescan with Spybot.

Popular Forums
icon
Computer Help 51,224 discussions
icon
Computer Newbies 10,453 discussions
icon
Laptops 20,090 discussions
icon
Security 30,722 discussions
icon
TVs & Home Theaters 20,937 discussions
icon
Windows 10 1,295 discussions
icon
Phones 16,252 discussions
icon
Windows 7 7,684 discussions
icon
Networking & Wireless 15,215 discussions

GAMING MUCH?

Enter for your chance to win* a game hardware bundle

One lucky winner will walk away with a gaming monitor, keyboard and mouse. Two lucky runners-up will score a gaming headset.