MS Antispyware false alert?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello! I'm still using MS Antispyware, at least until it will expire. After
the latest Windows update I've noticed something strange. If I reboot in safe
mode using the msconfig run string MS Antispyware ask me to Allow or Block
msconfig.exe to be added to the start up registry. In the beginning I set it
to Allow but after scanning my machine in safe mode and finding it clean of
spyware, rebooting in normal mode I got some alerts saying that some registry
keys were being changed. The were referred to shell32.dll and other .dll
files. I've made a search for them and all those keys were ok, that's why the
program allowed them. but after all those pop outs there was another one, of
the blue color telling me that:

The user xxxxxx, has decided to prevent the existing Internet Explorer
Security Zone Intranet locale level of 66816 from being changed to 0

I blocked it but didn't set the "remember this action".
I've notinced that if I don't allow msconfig to run at start up after the
reboot in normal mode again I just get the .dll alerts, all automatically
allowed from MS Antispyware.
Is it a bug? I run other software and Spybot S&D detected just the .dll
alerts and allowed them, since they were safe. I've tried uninstalling the
latest windows updates and do the scan in safe mode again and there was no
question about allowing msconfig to be added on startup nor the alert about
the IE security Zone after the reboot in normal mode. I'm very confused. At
first I thought it was a spyware and formatted my PC, but the problem is
persisting. I'm having this in another machine too.
And sorry for my english and if i din't use the right words. i'm running an
italian language machine. Thanks
Emy
 
Emy - I'm not completely certain, but I believe what you are seeing is a
false positive.

You would be well advised, I believe, to update to Windows Defender--the
name for beta2 of Microsoft Antispyware:

http://www.microsoft.com/downloads/...e7-da2b-4a6a-afa4-f7f14e605a0d&displaylang=en

This should provide more accurate real-time protection alerts.

There are some changes in the new version--no icon, by default, unless user
interaction is needed.

Definition updates come via AutoUpdate or Windows Update.

Some advanced tools are missing.

The program is re-written from scratch--and is now designed for
localization. German and Japanese versions are planned during the beta,
with other versions to follow after release.
 
Thanks for your help. The fact that really confuse me is why msconfig.exe is
asking to be added to the startup programs. I get the same alert with MS
Antispyware and Spybot S&D. Is it something because the latest update?
For the .dll file I'm sure it's a false positive since all the key numbers
are Microsoft ones. But I'd really like to know why I'd need to add msconfig
in the list of startup programs, since I'm using this OP from more that two
years and it never asked for something like this. Thanks for your help.
 
Back
Top