High jack entry??

This keeps reappearing when I scan with "Malwarebytes:"

"Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Policies\Explorer\NoActiveDesktopChange s
(Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken."

I remove it and it will appear aging some time later??
--

Windows Vista Home Premium 64-BIT SP1
Intel Core 2 Duo CPU T5550 @ 1.83GHz
4.00 GB RAM
300 GB HDD

Hi,
Active Desktop is/was a feature in previous OS's. Vista does not support
Active Desktop.

Because it returns after being fixed by MBAM, It's possible that another
security/antispyware program keeps creating this restriction.

A malware program may be creating the restriction.

If Windows Defender is updated and running and the Windows Firewall is
enabled and there are no other signs of malware infection, I would have MBAM
ignore this change.

More:
http://forums.techarena.in/anonymity...am/1075636.htm
and
http://search.live.com/results.aspx?...form=QBRE&qs=n

Hope this helps,
Don
[MS MVP- IE]


"Ed H" <> wrote in message
news:...
> This keeps reappearing when I scan with "Malwarebytes:"
>
> "Registry Data Items Infected:
>
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Policies\Explor
er\NoActiveDesktopChanges
> (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken."
>
> I remove it and it will appear aging some time later??
> --
>
> Windows Vista Home Premium 64-BIT SP1
> Intel Core 2 Duo CPU T5550 @ 1.83GHz
> 4.00 GB RAM
> 300 GB HDD

I do run Widows Defender and Spybot S&D at times. My system seems clean as a
whistle. Thanks.
--

Windows Vista Home Premium 64-BIT SP1
Intel Core 2 Duo CPU T5550 @ 1.83GHz
4.00 GB RAM
300 GB HDD


"Don Varnau" <don_04[at]varnau[dot]org> wrote in message
news:%...
> Hi,
> Active Desktop is/was a feature in previous OS's. Vista does not support
> Active Desktop.
>
> Because it returns after being fixed by MBAM, It's possible that another
> security/antispyware program keeps creating this restriction.
>
> A malware program may be creating the restriction.
>
> If Windows Defender is updated and running and the Windows Firewall is
> enabled and there are no other signs of malware infection, I would have
> MBAM
> ignore this change.
>
> More:
> http://forums.techarena.in/anonymity...am/1075636.htm
> and
> http://search.live.com/results.aspx?...form=QBRE&qs=n
>
> Hope this helps,
> Don
> [MS MVP- IE]
>
>
> "Ed H" <> wrote in message
> news:...
>> This keeps reappearing when I scan with "Malwarebytes:"
>>
>> "Registry Data Items Infected:
>>
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Policies\Explor
> er\NoActiveDesktopChanges
>> (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken."
>>
>> I remove it and it will appear aging some time later??
>> --
>>
>> Windows Vista Home Premium 64-BIT SP1
>> Intel Core 2 Duo CPU T5550 @ 1.83GHz
>> 4.00 GB RAM
>> 300 GB HDD
>

Why are you scanning with MBAM?

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware

**Seek expert assistance in http://spywarehammer.com/simplemachi...php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22, http://aumha.net/viewforum.php?f=30,
or other appropriate forums.**

If the procedures look too complex - and there is no shame in
admitting this isn't your cup of tea - take the machine to a local,
reputable and independent (i.e., not BigBoxStoreUSA or Geek Squad)
computer repair shop.
==
~PA Bear

Ed H wrote:
> This keeps reappearing when I scan with "Malwarebytes:"
>
> "Registry Data Items Infected:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Policies\Explo*rer\NoActiveDesktopChang es
> (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken."
>
> I remove it and it will appear aging some time later??
> --
>
> Windows Vista Home Premium 64-BIT SP1
> Intel Core 2 Duo CPU *T5550 @ 1.83GHz
> 4.00 GB RAM
> 300 GB HDD

Because it was recommended here as a good malware scanner. Just trying to
stay current.
--

Windows Vista Home Premium 64-BIT SP1
Intel Core 2 Duo CPU T5550 @ 1.83GHz
4.00 GB RAM
300 GB HDD


"PA Bear, MS MVP" <> wrote in message
news:5254abbb-cd53-4962-beef-...
Why are you scanning with MBAM?

See the rest of my previous post.

Ed H wrote:
> Because it was recommended here as a good malware scanner. Just trying to
> stay current.
<paste>
PA Bear, MS MVP wrote:
> Why are you scanning with MBAM?
>
> Unexplained computer behavior may be caused by deceptive software
> http://support.microsoft.com/kb/827315
>
> Run a /thorough/ check for hijackware, including posting the requested
> logs in an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.net/viewtopic.php?f=30&t=4075
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://www.elephantboycomputers.com/...moving_Malware
>
> **Seek expert assistance in
> http://spywarehammer.com/simplemachi...php?board=10.0,
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://aumha.net/viewforum.php?f=30, or other appropriate forums.**
>
> If the procedures look too complex - and there is no shame in
> admitting this isn't your cup of tea - take the machine to a local,
> reputable and independent (i.e., not BigBoxStoreUSA or Geek Squad)
> computer repair shop.
> ==
> ~PA Bear
>
> Ed H wrote:
>> This keeps reappearing when I scan with "Malwarebytes:"
>>
>> "Registry Data Items Infected:
>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Policies\Explo*rer\NoActiveDesktopChang es
>> (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken."
>>
>> I remove it and it will appear aging some time later??

"PA Bear [MS MVP]" <> wrote in
news::

> See the rest of my previous post.

Maybe you could explain to those of us that can't read minds as to why
you questioned the use of MBAM ?











>
> Ed H wrote:
>> Because it was recommended here as a good malware scanner. Just
>> trying to stay current.
> <paste>
> PA Bear, MS MVP wrote:
>> Why are you scanning with MBAM?
>>
>> Unexplained computer behavior may be caused by deceptive software
>> http://support.microsoft.com/kb/827315
>>
>> Run a /thorough/ check for hijackware, including posting the
>> requested logs in an appropriate forum.
>>
>> Checking for/Help with Hijackware
>> http://aumha.net/viewtopic.php?f=30&t=4075
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> **Seek expert assistance in
>> http://spywarehammer.com/simplemachi...php?board=10.0,
>> http://forums.spybot.info/forumdisplay.php?f=22,
>> http://aumha.net/viewforum.php?f=30, or other appropriate forums.**
>>
>> If the procedures look too complex - and there is no shame in
>> admitting this isn't your cup of tea - take the machine to a local,
>> reputable and independent (i.e., not BigBoxStoreUSA or Geek Squad)
>> computer repair shop.
>> ==
>> ~PA Bear
>>
>> Ed H wrote:
>>> This keeps reappearing when I scan with "Malwarebytes:"
>>>
>>> "Registry Data Items Infected:
>>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Policies
>>> \Explo*rer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad:
>>> (1) Good: (0) -> No action taken."
>>>
>>> I remove it and it will appear aging some time later??
>

From: "DanS" <>

| "PA Bear [MS MVP]" <> wrote in
| news::

>> See the rest of my previous post.

| Maybe you could explain to those of us that can't read minds as to why
| you questioned the use of MBAM ?


I think people are taking his response out of context.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

I'm sorry PA Bear, I don't know what your saying.
--

Windows Vista Home Premium 64-BIT SP1
Intel Core 2 Duo CPU T5550 @ 1.83GHz
4.00 GB RAM
300 GB HDD


"PA Bear [MS MVP]" <> wrote in message
news:...
> See the rest of my previous post.
>
> Ed H wrote:
>> Because it was recommended here as a good malware scanner. Just trying to
>> stay current.
> <paste>
> PA Bear, MS MVP wrote:
>> Why are you scanning with MBAM?
>>
>> Unexplained computer behavior may be caused by deceptive software
>> http://support.microsoft.com/kb/827315
>>
>> Run a /thorough/ check for hijackware, including posting the requested
>> logs in an appropriate forum.
>>
>> Checking for/Help with Hijackware
>> http://aumha.net/viewtopic.php?f=30&t=4075
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> **Seek expert assistance in
>> http://spywarehammer.com/simplemachi...php?board=10.0,
>> http://forums.spybot.info/forumdisplay.php?f=22,
>> http://aumha.net/viewforum.php?f=30, or other appropriate forums.**
>>
>> If the procedures look too complex - and there is no shame in
>> admitting this isn't your cup of tea - take the machine to a local,
>> reputable and independent (i.e., not BigBoxStoreUSA or Geek Squad)
>> computer repair shop.
>> ==
>> ~PA Bear
>>
>> Ed H wrote:
>>> This keeps reappearing when I scan with "Malwarebytes:"
>>>
>>> "Registry Data Items Infected:
>>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Policies\Explo*rer\NoActiveDesktopChang es
>>> (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken."
>>>
>>> I remove it and it will appear aging some time later??
>

On Mon, 9 Feb 2009 20:29:58 -0500, David H. Lipman wrote:

> From: "DanS" <>
>
>| "PA Bear [MS MVP]" <> wrote in
>| news::
>
>>> See the rest of my previous post.
>
>| Maybe you could explain to those of us that can't read minds as to why
>| you questioned the use of MBAM ?
>
>
> I think people are taking his response out of context.

Oh, now we know...

Newsgroup:
microsoft.public.security.homeusers

Name:
PA Bear [MS MVP] 21-Jan-09 2:20:36 AM and 03-Feb-09 6:01:24 AM respectively
[quote]
....furthermore, the authors of MBAM did not intend users to keep the free
version installed.
[unquote]
and
[quote]
There are free versions of MBAM & SAS. You didn't do anything wrong in
using them. I simply don't recommend leaving them installed.
[unquote]