Ad-Aware registry warning

[Mike]

I am getting a warning from Ad-Aware about a windows 2K registry entry:

Vendor:Windows
Category:Vulnerability
Object Type:RegData
Size:-
Location:SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
(Explorer.exe)
Last Activity:12-13-2004
Risk LevelLow
Comment:Shell Possibly Compromised
Description:General Windows Security Issue.Your system security may be
compromised.

I am unable to find anything on the Lavasoft site as to why this is considered
to be an indication of a Security Issue. Is this low warning a sign of
something that needs to be resolved? Should I delete the entry?

Thanks.

 

[Rob Stow]

I am getting a warning from Ad-Aware about a windows 2K registry entry:

Vendor:Windows
Category:Vulnerability
Object Type:RegData
Size:-
Location:SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
(Explorer.exe)
Last Activity:12-13-2004
Risk LevelLow
Comment:Shell Possibly Compromised
Description:General Windows Security Issue.Your system security may be
compromised.

I am unable to find anything on the Lavasoft site as to why this is considered
to be an indication of a Security Issue. Is this low warning a sign of
something that needs to be resolved? Should I delete the entry?

Thanks.

I have the same registry entry (in the HKLM tree) and the
latest Ad-Aware doesn't complain about it. All I can
think of is that your actual explorer.exe file might be
a newer version than what Ad-Aware knows about, or it might
be an older version that has known security issues.

 

[Guest]

Don't know if this would help..but I use Ad Aware as well...try uninstalling
your older version of Ad Aware and reinstalling it..see if that clears up the
warning..

e

 

[Mike]

Don't know if this would help..but I use Ad Aware as well...try uninstalling
your older version of Ad Aware and reinstalling it..see if that clears up the
warning..

"Mike" wrote:

That is a common error message from Ad-Aware. I finally found a discussion of
it somewhere and concluded it was pretty much a false negative.

Try one of the other spybot lookers and see if their results do the same.