Possible bug: shell execute hooks re: ms antispyware beta

[Guest]

Version: 1.0.614
Application: Microsoft Antispyware Beta

In system explorers Shell Execute Hooks
theres an entry listed for:

Microsoft.Antispyware.ShellExecuteHook.1

Antispyware indicates it is an unknown execute hook.

When I tried to block, i get this message:
"You cannot remove this application! This application is
part of the Microsoft Antispyware package"

Am I ok?

 

[Bill Sanderson]

You are ok.

One possible explanation for this is that as far as I can see beta code is
never listed as "good." We've seen a few other cases where for one reason
or another there was some beta code left on a machine and it was flagged in
this way.

If you still see this when the product is released, then I'd investigate it
very carefully.

 

[Steve Dodson [MSFT]]

I think this means you have not restarted the computer after updating the
application. It should go away after the shell execute hook is reset with
explorer.exe (the reason for the reboot).

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security
http://blogs.technet.com/stevedod
--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

 

[Bill Sanderson]

Thanks--I'll see if I can test that at some point.
--

I think this means you have not restarted the computer after updating the
application. It should go away after the shell execute hook is reset with
explorer.exe (the reason for the reboot).

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security
http://blogs.technet.com/stevedod
--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

You are ok.

One possible explanation for this is that as far as I can see beta code
is never listed as "good." We've seen a few other cases where for one
reason or another there was some beta code left on a machine and it was
flagged in this way.

If you still see this when the product is released, then I'd investigate
it very carefully.