Results 1 to 2 of 2

Thread: Hkey_users

  1. #1
    Junior Member
    Join Date
    Nov 2009
    Posts
    1

    Default Hkey_users

    Hi,

    When I run Spybot S&D one of the results that comes up is Microsoft.Windows.Security.InternetExplorer
    And when I click the + button to expand there is
    HKEY_USERS\S-1-5-21-329068152-1482476501-682003330-1008\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe (is not) W=1

    Spybot labels this in red, I would like to know if I should fix this or not.

  2. #2
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    I suggest you "Fix selected problems" on those detections unless you experienced an issue such as the one described in the following article and intentionally changed those registry entries from their default setting:

    * AutoShapes that were added to an HTML or an MHTML file in a Microsoft Office program do not appear when you open the file in Internet Explorer after you install Windows XP SP2, see Microsoft Support.

    The key "HKEY_CURRENT_USER,"\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" (standard value is 1 with SP2) determines the ability to perform certain actions for local websites, i.e. websites saved on harddisk.

    The value is set to 0 (zero) by some malicious applications in order to deminish the security settings for the zone "local computer". (see Microsoft Productinfo for details).

    There are several threads on the subject: Windows.Security.Internet Explorer and Scan Result.

    If you want you can also tell Spybot-S&D to exclude those detections from further scans.

    You can exclude a product from the search as follows:
    First of all procede a scan with Spybot - Search & Destroy. Now, mark the item, you want to exclude from the search, with a left-click.
    It is marked blue now. Then right-click this entry and select "exclude this product from further searches".

    It is also possible to exclude it before the search. Please run Spybot - Search & Destroy in "Advanced Mode" and go to "Settings" -> "Ignore products". There you can tick the checkbox in front of the product you want to exclude from the search.

    Best regards
    Sandra
    Team Spybot

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •