Spybot S&D finding Win Explorer entry

S

Smirnoff

First time I've run Spybot S&D since recent update. I rarely get anything
reported so this one intrigued me.
Under Windows Explorer - User settings:

HKEY_USERS\S-1-5-21-1695355980-3387324492-4094481314-1007\Software
\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoLogOff!=W=0

Anybody else found this?
Should I let Spybot delete it?
 
C

Charlie Tame

W2003...

I don't have that key, oh well.

I can't see it being malicious but what I suggest is that you find it using
regedit, export it to a file and keep it somewhere handy where you can
simply click on it to restore if anything stops working. I think this would
be safer than letting spybot do it.

Charlie
 
S

Smirnoff

Thanks for your reply.
What you say makes sense, although Spybot does have a restore facility.
Think I'll wait a little longer to see if anyone has (or has had ) the same
situation.
 
C

caver1

Its a false positive in Spybot. If you delete it windows will rebuild it
and you will see it everytime. So just ignore it.
 
A

--Alias--

Smirnoff said:
I see. I've never seen it before, is this the result of the recent update?

Doubtful. I just ran Spybot and it came up empty. I am up-to-date with
Windows Update. Have you got the latest Spybot?

Alias
 
S

Smirnoff

--Alias-- said:
Doubtful. I just ran Spybot and it came up empty. I am up-to-date with
Windows Update. Have you got the latest Spybot?

Alias

Yes, 1.4.
I let Spybot fix the problem then ran it again. It didn't show up, so may
not have been a false positive.
However, it may be reappear after a restart/boot up.
 
C

Chat

I have had it appear a couple of times - I delete it - and it comes back,
but not all the time


First time I've run Spybot S&D since recent update. I rarely get anything
reported so this one intrigued me.
Under Windows Explorer - User settings:

HKEY_USERS\S-1-5-21-1695355980-3387324492-4094481314-1007\Software
\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoLogOff!=W=0

Anybody else found this?
Should I let Spybot delete it?
 
A

--Alias--

Smirnoff said:
Yes, 1.4.
I let Spybot fix the problem then ran it again. It didn't show up, so may
not have been a false positive.
However, it may be reappear after a restart/boot up.

I meant the latest definitions, not the build. When false positives
appear, the people at Spybot are pretty good at correcting it.

Alias
 
S

Smirnoff

--Alias-- said:
I meant the latest definitions, not the build. When false positives
appear, the people at Spybot are pretty good at correcting it.

Alias

Yes, I have the latest updates, including the immunisation database.
That's what made me ask if they may be causing it as I've not seen anything
like it before.
 
S

Smirnoff

Smirnoff said:
Yes, I have the latest updates, including the immunisation database.
That's what made me ask if they may be causing it as I've not seen
anything like it before.

Just did a restart and ran Spybot, it didn't find anything.
I'll try again after a full reboot.
 
C

caver1

I have deleted it every time I ran spybot and every time it sees it
again and I'm up to date on all programs. That is why I now ignore it.
Do a google search. That's how I found out if it was a problem or not.
 
S

Smirnoff

--Alias-- said:
Including the ones that came out on Friday?

Yes, they had the immunisation database.
Also, just to be sure I tried to update before I ran Spybot after restart.
 
S

Smirnoff

caver1 said:
I have deleted it every time I ran spybot and every time it sees it
again and I'm up to date on all programs. That is why I now ignore it.
Do a google search. That's how I found out if it was a problem or not.

Sorry you have the same problem.
I've let Spybot delete(fix) it and ran Spybot again, I've re-started and ran
Spybot, it didn't find the problem again.
Do you find it only returns again after a full reboot?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top