View Full Version : ActiveX Value deleted: allow change?
Hi,
spybot opens a window with with the following message:
Spybot&Destroy has detected an important registry entry that has been changed
Category: ActiveX Distribution Unit
Change: Value deleted
Entry: {7530BFB8-7293-4D34-9923-61A11451AFC5}
my question:
should I allow change or deny change?
well, actually only "allow change" is clickable, "deny change" is not
thank you for any help,
cheers, anderle
The clsid shows it as being related to Eset Online Scanner:
http://www.systemlookup.com/O16/1914-OnlineScanner_cab.html
Might as well just allow the change.If the active x is needed if/when you do an online scan again,the active x will probably just be installed once again. :)
The clsid shows it as being related to Eset Online Scanner:
http://www.systemlookup.com/O16/1914-OnlineScanner_cab.html
Might as well just allow the change.If the active x is needed if/when you do an online scan again,the active x will probably just be installed once again. :)
thank you so much!
I just allowed the change.
to understand better please let me ask generally:
when it says that it detected a change, that the change was that a value had been deleted, and then asks if I allow it ( as was he case here ):
does that mean that the entry actually has not been deleted yet, that spybot 'wants' to delete it and asks me for permission first?
thank you very much again,
anderle
You're welcome. :)
to understand better please let me ask generally:
when it says that it detected a change, that the change was that a value had been deleted, and then asks if I allow it ( as was he case here ):
does that mean that the entry actually has not been deleted yet, that spybot 'wants' to delete it and asks me for permission first?
Normally,yes.Teatimer will detect that an entry is about to be deleted,and will ask if you Allow or Deny the change.Teatimer itself isn't deciding to delete the entry,though,it is just telling you about it so you're aware there is a change about to happen,and can make a decision on what to do.
Except,this time the Deny button wasn't clickable,because it was an active x/bho.
For an explanation of that,please see:
http://forums.spybot.info/showthread.php?36275-BHO-Key-deleted-Deny-button-grayed-out
On changes such as the removal of a Browser Helper Object (Value deleted), the "Deny change" is grayed out because by the time TeaTimer recognizes the Registry change the underlying code for the BHO has been deleted and denying the change would do no good to save the BHO from being deleted and just leave an orphaned registry entry.
thank you very much once more :)
all makes perfect sense and now I understand better,
cheers, anderle