InternetExplorer: Settings (Registry change, nothing done)

[sputnik365]

XP Media centre
Spybot updated
IE7



Hi,
Anyone know if this is anything to worry about?

Microsoft.Windows.Security.InternetExplorer: Settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-1579139565-534010669-2603711333-1006\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe!=W=1

Thanks

[sputnik365]

sry I hadn't searched thoroughly enough.
Found this.
http://forums.spybot.info/showthread.php?t=6749
Why would it have just shown up now?
Thanks

[Zenobia]

Did you checkmark either of these recently?:
http://forums.spybot.info/showpost.php?p=39911&postcount=9
(from this thread:)
http://forums.spybot.info/showthread.php?t=6560

Go into Internet Explorer > Tools > Internet Options > Advanced tab > scroll down to Security (near the bottom). Uncheck these two (2) items unless you intentionally set them:

* Allow active content from CDs to run on My Computer
* Allow active content to run in files on My Computer

More info here,though it looks like msdn took the linked article down:
http://forums.spybot.info/showpost.php?p=39179&postcount=4

[sputnik365]

Did you checkmark either of these recently?:
http://forums.spybot.info/showpost.php?p=39911&postcount=9
(from this thread:)
http://forums.spybot.info/showthread.php?t=6560


More info here,though it looks like msdn took the linked article down:
http://forums.spybot.info/showpost.php?p=39179&postcount=4


Yes, did it, thanks ,as in thread I linked.
It fixed it but I am puzzled as to why it should show up now when I haven't knowingly changed any settings:
Microsoft!!:banghead:

[Zenobia]

Are you having any malware-type problems with your computer?

[sputnik365]

Not really, just one program that is trying to access the wrong IP adresses.
But after above, I wonder. Spybot, icesword and blbeta all clean.

Thanks

[Zenobia]

Which program is trying to access the wrong ip addresses,if you don't mind me asking(sorry,curiosity got the best of me,lol)?

Not sure why Spybot would just all of a sudden detect that if you didn't change any settings yourself.If you hadn't updated Spybot since before it began detecting Microsoft.Windows.Security.InternetExplorer,and then just recently updated,that would be one explanation for Spybot finding it now.But,l see Spybot's been detecting Microsoft.Windows.Security.InternetExplorer since sometime last Summer,so that's not likely.

If you are concerned something malicious may have changed that .reg entry,and did suspect you had malware,you could probably get checked out in the malware removal section.If so,let me know,and I'd put the links for the instructions,etc. up for you. :)

[sputnik365]

Thanks,

LadbrokesPoker

Done all the preliminary and all showed clean.

OnLine Panda ActiveScan ok
OnLine Ewido ok
OnLine trendMicro ok
Avast FalsePositive Win32:CTX pskavs.dll
AVGAS ok
Spybot-S&D ok

I will post a HJT log if you think I should

Thanks again

[Zenobia]

If that were me and all those came up clean,I'd probably think everything was okay,but it's up to you.

Spybot detects Microsoft.Windows.Security.InternetExplorer: Settings because sometimes malware sets it to zero,but it's not always something malicious that sets that.

You yourself would be the best judge,and it should be your decision.If everything seems okay with your computer,then you're probably good.If things just don't seem quite right,or you are feeling very uncertain as to why Spybot detected that,then these are the things to follow:
http://forums.spybot.info/showthread.php?t=288

And then,hijackthis logs get posted in this forum:
http://forums.spybot.info/forumdisplay.php?f=22
hth. :)