Windows Defender message in event log

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I received the following message in the system event log.
Can anyone explain what it means and if it could be the result of malware
(as the text suggests). How the h*ll can anyone know whether this is an
expected event or not :-) ?


Windows Defender Configuration has changed. If this is an unexpected event
you should review the settings as this may be the result of malware.
Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\Signature
Updates\SignatureLocation = C:\Documents and Settings\All Users\Application
Data\Microsoft\Windows Defender\Definition
Updates\{20B07322-6D53-48CB-87CC-7A96ABFFA89C}
New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Signature
Updates\SignatureLocation = C:\Documents and Settings\All Users\Application
Data\Microsoft\Windows Defender\Definition
Updates\{73153063-B851-49CC-BD81-3F4FB8A27F1C}

Thanks in advance for any feedback,
Frank
 
Frank.be said:
I received the following message in the system event log.
Can anyone explain what it means and if it could be the result of malware
(as the text suggests). How the h*ll can anyone know whether this is an
expected event or not :-) ?
Click to expand...

(snippage)

Please post in one of the newsgroups specifically set up for the beta
(software that isn't finished and is still in the bug-checking phase)
Windows Defender program. Microsoft.public.windowsxp.security_admin is not
one of them.

http://www.microsoft.com/athome/security/spyware/software/newsgroups/default.mspx

These newsgroups can be accessed via NNTP or HTTP.

To access these newsgroups using NNTP, please use the following information
for your NNTP client (such as Microsoft Outlook Express):

- NNTP Server: privatenews.microsoft.com
- Account name: privatenews\spyware
- Password: spyware

NOTE: No password will be required via the HTTP link.

Malke
 
Back
Top