general manson:
None of the detections that you are getting are false positives. They all indicate unusual settings within the Windows OS that may or may not be a problem depending if you intentionally altered default settings or chose to allow certain security products to alter those settings.
The following detection:
Code:
Windows Security Center.AntiVirusOverride: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride!=dword:0
Indicates that the ability of Windows Security Center to monitor the status of your anti-virus has been turned off. Windows Security Center can monitor the status of the most widely used AntiVirus products (such as Ahnlab, ComputerAssociates, Kaspersky, McAfeeAnti, Panda, Sophos, Symantec, Trend, etc.). With this indicator disabled Windows Security Center will not monitor if your AntiVirus has been disabled or is out of date. If you go into Start > Control Panel > Security Center > look at the right hand side of the window and check the settings under "Virus Protection" (expand if necessary). I believe that you have overridden the protections and that you will find a button labeled "Recommendations". If you click on the "Recommendations" button I believe that you will get a window that indicates something like:
- I have an antivirus program that I'll monitor myself.
Note: Windows won't monitor your virus protection status and won't send you alerts if it is off or out of date.
These detections:
Code:
Windows Security Center.AntiVirusDisableNotify: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0
Windows Security Center.FirewallDisableNotify: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0
Go into Start > Control Panel > Security Center > Resources (on the left hand side of the window – expand if necessary) > click "Change the way Security Center alerts me". This brings up an "Alert Setting" window.
There are three possible alerts:
- Firewall
Alert me if my computer might be at risk because of my firewall settings
- Automatic Updates
Alert me if my computer might be at risk because of my Automatic Updates settings
- Virus Protection
Alert me if my computer might be at risk because of my virus protection software settings
I believe that you will find the first and third alerts turned off. Note: Certain security products (notably McAfee and Norton) will turn off these alerts if you optionally set them to this alert function of the Windows Security Center.
This detection:
Code:
Windows.ActiveDesktop: User settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-117609710-1958367476-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoHTMLWallPaper!=W=1
Indicates that you are allowing HTML coded wall paper on your system.
The items under ActiveDesktop are supposed to be a dword:
- 0 = no restriction
- 1 = enable restriction
NoHTMLWallPaper = only allow bitmaps (BMP) as wallpaper
See the following article for a more complete description of ActiveDesktop registry entries:
If you did not intentionally set that registry value to allow HTMLWallPaper than you should fix the detection.
This detection:
Code:
Windows.Security.InternetExplorer: Settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-117609710-1958367476-725345543-1003\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe!=W=1
See the following thread: