PDA

View Full Version : Is any gentleman to help me with a false-positive suspicion?



Icaro
2007-11-08, 19:33
OS: Windows XP (Build: 2600) Service Pack 2

I] Browser infos:

1/ Main: Opera/9.24 (Windows NT 5.1; U; fr)

Version: 9.24
Révision 8816

Java: Sun Java Runtime Environment version 1.6 XHTML+Plug-in Vocal /Plug-in unload

2/ Secondary: Firefox (for opera incompatible websites)

please click image to see readable infos

http://img80.imageshack.us/img80/9333/firefoxversionwindowya1.th.png (http://img80.imageshack.us/my.php?image=firefoxversionwindowya1.png)


Note: IE not installed (though...):laugh:



II] Spybot infos: Spybot - Search & Destroy version: 1.4 (build: 20050523)
Latest update: 11.08.2007

III] False positive occured at scan result




The followings show log details regarding the two objects I am concerned with and for which I would appreciate a bit of assistance:

1- eSupport.FFBiosExt: System file (File, nothing done)
K:\WINDOWS\system32\drivers\TVICHW32.SYS

2-Microsoft.WindowsSecurityCenter_disabled: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Start!=W=2


A bunch of thanks in advance for charitable gesture


All with SB :bigthumb: Long life to SPYBOT!!! :crowned:

spybotsandra
2007-11-08, 21:06
Hello,

I am not a gentlemen*g*....

1. Please have a look at this link:
http://forums.spybot.info/showthread.php?t=19916

2.Spybot - Search & Destroy is detecting Windows Security Center associated with Microsoft Security Center Registry changes. This is neither a false positive nor a bug. It is just an information.
Spybot-S&D only wants to bring to your attention that "someone" disabled one or more notifications in the Windows Security Center, e.g. the notifications that your virus protection is not active or not up-to-date. If you changed the settings yourself you can safely tell Spybot-S&D to exclude those detections from further scans.
In order to do so please right-click each in turn, then click "exclude this detection from future scans". That way, should any other part of security center settings change, Spybot-S&D will still detect those.
The same is true if you have another security solution installed (like McAfee Security Center or Norton Internet Security). These programs do also disable the Windows Security Center in order to take care of things themselves.
The reason why the changes are flagged by Spybot-S&D is that there are also malware programs that disable the notifications so the user doesn't take note of his security tools not being effective.

Some more information is also available in our forum:
http://forums.spybot.info/showthread.php?t=87

Best regards
Sandra
Team Spybot

Icaro
2007-11-11, 02:03
Thank you very much Sandra.:bigthumb: