wikipedian Posted April 5, 2010 ID:227442 Share Posted April 5, 2010 MBAM picked this up:hkey_local_machine software microsoft windows currentversion run policies explorerbad 1 good 0I have Win7 Home premium X64. Link to post Share on other sites More sharing options...
wikipedian Posted April 5, 2010 Author ID:227538 Share Posted April 5, 2010 or be exact: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges Link to post Share on other sites More sharing options...
wikipedian Posted April 5, 2010 Author ID:227539 Share Posted April 5, 2010 Since I can't edit my response, this is the object detected by MBAM, Registry Data Items Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken. Link to post Share on other sites More sharing options...
wikipedian Posted April 5, 2010 Author ID:227542 Share Posted April 5, 2010 There is NO OTHER detection, online this..... Link to post Share on other sites More sharing options...
Ibrad Posted April 5, 2010 ID:227546 Share Posted April 5, 2010 It's not an FP. MBAM just is warning you to a change that may be malicious but MBAM does not know what app changed it. So I would just add it to your ignore list if nothing malicious did it. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now