unknown Shell Execute Hook

  • Thread starter Thread starter Frank M
  • Start date Start date
F

Frank M

Does anyone know what this is all about?
I get this info when checking Windows Shell Execute Hooks:

Microsoft.AntiSpyware.ShellExecuteHook.1
This is an unknown Shell Execute Hook.

Name: Microsoft Windows AntiSpyware
Description: Microsoft AntiSpyware Shell Extension
Publisher: Microsoft Corporation
File path: c:\program files\microsoft
antispyware\shellextension.dll
File version: 1.0.614.10

Technical Details:
CLSID: {9EF34FF2-3396-4527-9D27-04C8C1C67806}
ProgID: Microsoft.AntiSpyware.ShellExecuteHook.1
Original file name: ShellExtension.dll
MD5: 4b202fff9eb43fdc8d3290deaab7487e

Frank M
 
Hi

Start MSAS > Advanced tools > System Explorers
System > Shell execute hooks.

Mark your hook and "Send to Spynet for analysis", lower/right,
so MSAS team remember to update this in future definitions.
 
We are aware of this one ;)


--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security
http://blogs.technet.com/stevedod
--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
 
So you will soon take care of this one? :-)
--
Andre
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Steve Dodson said:
We are aware of this one ;)


--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security
http://blogs.technet.com/stevedod
--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
Andre Da Costa said:
I would recommend you just ignore this one.
--
Andre
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
Click to expand...
Click to expand...
 
Back
Top