scan result-shall I DELETE THIS

[alexchris]

Scanning the xp using the spybot and it found this entry
Microsoft windows security centre.task manager
(HKEY-users\s-1.....\software\microsoft\windows\current version\policies\system\disable)
-question is shall I delete this entry. Thanks

[drragostea]

What is the exact result really? A Security Center bypass?

[alexchris]

That is part of the scan result. All the others I left them 'checked' and 'fix it'. I am not too sure about this particular one 'Microsoft.......Task Manager"

[drragostea]

Can you run a scan again? This time, type down the results word for word. How many are there (entries)? Also, do you see any description for the entry when you click on it? You should be to drag a tab on the right-hand side and it will tell you the details of the entry.

[alexchris]

Rescan and this is the only entry and the location:-
Microsoft.WindowsSecurityCenter.TaskManager
expand - HKEY_Users\S-1-5-21-796845957-602162358-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Policies\System\Disable..(unable to see anything further than "disable"

Kind;- Registry change

Q: Shall I "fix it"? TIA

[drragostea]

Is there an description when you click on it? Also, is your system patched (up to date)? Are you using the latest version of Spybot?

I'm asking this because I want to know if you have SP2 (Security Center) on your computer. Have you disabled to monitoring of your firewall or anti-virus in the center?

I'm not sure, how to go on. What I would like to know is what description Spybot gives you (of that entry) when you complete the scan.

[alexchris]

There is no description. Using XP Home sp2 fully patched(just before running the scan) and running spybt 1.4 (definitions updated just before the scan). Windows Firewall - "ON'. Also installed AVG in the computer.

[drragostea]

Alright, now it seems that you're running a dated version of Spybot-SD. The latest version of Spybot-SD is 1.5.2.20.

Please download the latest version from SaferNetworking servers:
http://www.safer-networking.org/en/mirrors/index.html

Uninstall version 1.4 before installing the new one. Do not install the new one over the old one. Also, some steps to uninstall:
-Disable SDHelper and TeaTimer. Go to ADVANCED MODE. You should find it there.
-Undo the immunization. You can reimmunze after a fresh install.

During the installation, do NOT download updates immediately. You can download them via. default integrated updater.

Update. Immunize. Run scan.

Version 1.5.2 resolves a lot issues.
http://www.safer-networking.org/en/versionhistory/31.html
This should give some insight to the latest version.

[Zenobia]

I'm not sure, how to go on. What I would like to know is what description Spybot gives you (of that entry) when you complete the scan.

From what I found on Microsoft.WindowsSecurityCenter.TaskManager,I believe it means that Task Manager may have been disabled. :)

[drragostea]

Zenobia, that doesn't sound so good. Normally, the Task Manager wouldn't be disabled unless... by malware :fear:. I first thought i was something with the Security Center because it was in the entry. Then I was skeptical because it included Task Manager.

I stayed quiet about it :sad:.

Anyhow, alexchris can you access the Task Manager?
(Ctrl+Alt+Delete).

@Zenobia, so would it be a good idea to just let Spybot fix it?

[Zenobia]

It depends on whether or not alexchris set it themselves,or if maybe a network administrator set it.If not,then yes,it is probably a good idea to let Spybot fix it.If alexchris or an admin set it,then it could be added to Spybot's ignore list.

[drragostea]

The final question would be is this computer a personal computer at home or a workstation computer.

[md usa spybot fan]

drragostea:


The final question would be is this computer a personal computer at home or a workstation computer.

alexchris (http://forums.spybot.info/member.php?u=28038) originally indicated this in their first post (http://forums.spybot.info/showpost.php?p=197711&postcount=1):


Scanning the xp using ...
That statement was later clarified in post #7 (http://forums.spybot.info/showpost.php?p=197755&postcount=7)


... Using XP Home sp2 fully patched(just before running the scan) ...
Since alexchris (http://forums.spybot.info/member.php?u=28038) is using XP Home it would not appear that group policies set by a "workstation" administrator are not involved in the setting of this registry key.

[drragostea]

Thank you md, for clarifying. I happen to be skimming through the contents.