possible undetected.

T

tsunami

New member
I am in the process of fixin my computer. I usualy do not even have virus scan, because spybot and a firewall do good (well over 2 years now). However i have a problem (virus?). I am scanning now so i will update in a few moments.

problem: My task manager and regedit would both give me the error "|this feature| has been disabled by your administrator"

i tried to fix it myself thinking it was a setting then after some research thought it might be a virus, downloaded the software (ClamWin). Before I started i let spybot have a go at it. It found 2 things:
microsoft.windowssecuritycenter.taskmanager w/ 1 entry and
smithfraud-C w/ 2 entries

It fixed my task manager but not my regedit...

now i have 3 questions?
Will spybot fix this soon with possibly a microsoft.windowssecuritycenter.registryedit??
and if this is a virus is it gone? or just masked by spybot by enabling a symptom on the surface?
 
Hello,

Spybot - Search & Destroy 1.4 has been detecting Security Risks (renamed to "Windows Security Center" on July 30) associated with Microsoft Security Center Registry changes. This is neither a false positive nor a bug. It is just an information.
Spybot-S&D only wants to bring to your attention that "someone" disabled one or more notifications in the Windows Security Center, e.g. the notifications that your virus protection is not active or not up-to-date. If you changed the settings yourself you can safely tell Spybot-S&D to exclude those detections from further scans.
In order to do so please right-click each in turn, then click "exclude this detection from future scans". That way, should any other part of security center settings change, Spybot-S&D will still detect those.
The same is true if you have another security solution installed (like McAfee Security Center or Norton Internet Security). These programs do also disable the Windows Security Center in order to take care of things themselves.
The reason why the changes are flagged by Spybot-S&D is that there are also malware programs that disable the notifications so the user doesn't take note of his security tools not being effective.

Some more information is also available in our forum:
http://forums.spybot.info/showthread.php?t=87

Best regards
Sandra
Team Spybot
 
tsunami:

Not having an anti-virus program with an active (real time) scan component is not what I would personally consider the wisest approach to keeping your system malware free. Please review the following thread:
Note the following:

10.) An Anti-Virus product is a necessity. There are many excellent programs that you can purchase. However, we choose to advocate the use of free programs whenever possible. Some very good and easy-to-use free A/V programs are AVG, Avast, and AntiVir. It's a good idea to set these to receive automatic updates so you are always as fully protected as possible from the newest virus threats.
Click to expand...
 
So i had a virus.

I ended up having the ciaworm. It came from a sketchy file i downloaded but to the chance, usually don't do that. So now i have virus scan and everything.
I still have a big problem though:
When spy bot fixed the windowssecurity.taskmanager I was allowed to access my task manager, however cleaning the files and getting rid of the viruses hasent allowed me to access my registry....
Spybot apperantly can access my registry and change it though if it unlocked my task manager... Can someone help me access my registry again?


Answer, Type this into run dialog and it fixes the probelm:
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f
 
Last edited:
You must log in or register to reply here.
Back
Top