Welcome to SecurityForumz.com!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Spybot scans registry change...

 
   Security Forums (Home) -> Spybot S&D RSS
Next:  Spybot scanner mentions registry change; what doe..  
Author Message
Massimo

External


Since: Mar 24, 2008
Posts: 6



(Msg. 1) Posted: Mon May 26, 2008 7:16 pm
Post subject: Spybot scans registry change...
Archived from groups: microsoft>public>security>virus, others (more info?)

Hello,

Spybot scan mentions this registry change:

Microsoft Windows SecurityCenter.FirewallOverride
(SBI $0C94D702) settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride
(is not) dword:0

What does it mean and what would be advisable to do?

Thanks,

Massimo

 >> Stay informed about: Spybot scans registry change... 
Back to top
Login to vote
Lon

External


Since: May 26, 2008
Posts: 2



(Msg. 2) Posted: Mon May 26, 2008 7:16 pm
Post subject: Re: Spybot scans registry change... [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Massimo wrote:
> Hello,
>
> Spybot scan mentions this registry change:
>
> Microsoft Windows SecurityCenter.FirewallOverride
> (SBI $0C94D702) settings
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride
> (is not) dword:0
>
> What does it mean and what would be advisable to do?
>
> Thanks,
>
> Massimo

Spybot forum:
http://forums.spybot.info/showthread.php?t=2940

 >> Stay informed about: Spybot scans registry change... 
Back to top
Login to vote
David H. Lipman

External


Since: Jul 04, 2003
Posts: 1756



(Msg. 3) Posted: Mon May 26, 2008 9:57 pm
Post subject: Re: Spybot scans registry change... [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

From: "Massimo"

| Hello,
|
| Spybot scan mentions this registry change:
|
| Microsoft Windows SecurityCenter.FirewallOverride
| (SBI $0C94D702) settings
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride
| (is not) dword:0
|
| What does it mean and what would be advisable to do?
|
| Thanks,
|
| Massimo

If you are using a 3rd party FireWall application, ignore it.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
 >> Stay informed about: Spybot scans registry change... 
Back to top
Login to vote
Lon

External


Since: May 26, 2008
Posts: 2



(Msg. 4) Posted: Mon May 26, 2008 9:57 pm
Post subject: Re: Spybot scans registry change... [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

David H. Lipman wrote:
> From: "Massimo"
>
> | Hello,
> |
> | Spybot scan mentions this registry change:
> |
> | Microsoft Windows SecurityCenter.FirewallOverride
> | (SBI $0C94D702) settings
> | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride
> | (is not) dword:0
> |
> | What does it mean and what would be advisable to do?
> |
> | Thanks,
> |
> | Massimo
>
> If you are using a 3rd party FireWall application, ignore it.
>
If I recall, it just means that the Windows firewall manager cannot see
and control whatever firewall is in use.

Search and Destroy has the ability to exclude any detection if that is
the case.
 >> Stay informed about: Spybot scans registry change... 
Back to top
Login to vote
Massimo

External


Since: Mar 24, 2008
Posts: 6



(Msg. 5) Posted: Tue May 27, 2008 12:46 am
Post subject: Re: Spybot scans registry change... [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hello Lon,

On Mon, 26 May 2008 10:11:05 -0600, Lon
wrote:

>Spybot forum:
>http://forums.spybot.info/showthread.php?t=2940

Thanks for the link.

Massimo
 >> Stay informed about: Spybot scans registry change... 
Back to top
Login to vote
Massimo

External


Since: Mar 24, 2008
Posts: 6



(Msg. 6) Posted: Tue May 27, 2008 12:47 am
Post subject: Re: Spybot scans registry change... [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hello David,

On Mon, 26 May 2008 17:57:20 GMT, "David H. Lipman"
wrote:

>From: "Massimo"
>
>| Hello,
>|
>| Spybot scan mentions this registry change:
>|
>| Microsoft Windows SecurityCenter.FirewallOverride
>| (SBI $0C94D702) settings
>| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride
>| (is not) dword:0
>|
>| What does it mean and what would be advisable to do?
>|
>| Thanks,
>|
>| Massimo
>
>If you are using a 3rd party FireWall application, ignore it.

I use Comodo firewall...
Thanks for the clear answer.

Massimo
 >> Stay informed about: Spybot scans registry change... 
Back to top
Login to vote
Massimo

External


Since: Mar 24, 2008
Posts: 6



(Msg. 7) Posted: Tue May 27, 2008 12:49 am
Post subject: Re: Spybot scans registry change... [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hello,

On Mon, 26 May 2008 12:34:11 -0600, Lon
wrote:

>David H. Lipman wrote:
>> From: "Massimo"
>>
>> | Hello,
>> |
>> | Spybot scan mentions this registry change:
>> |
>> | Microsoft Windows SecurityCenter.FirewallOverride
>> | (SBI $0C94D702) settings
>> | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride
>> | (is not) dword:0
>> |
>> | What does it mean and what would be advisable to do?
>> |
>> | Thanks,
>> |
>> | Massimo
>>
>> If you are using a 3rd party FireWall application, ignore it.
>>
>If I recall, it just means that the Windows firewall manager cannot see
>and control whatever firewall is in use.
>
>Search and Destroy has the ability to exclude any detection if that is
>the case.

Hmm. Thanks Lon.

Massimo
 >> Stay informed about: Spybot scans registry change... 
Back to top
Login to vote
Tecknomage

External


Since: Apr 01, 2009
Posts: 1



(Msg. 8) Posted: Wed Apr 01, 2009 9:15 am
Post subject: Re: Spybot scans registry change... [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On Mon, 26 May 2008 15:16:51 +0200, Massimo
wrote:

> Hello,
>
> Spybot scan mentions this registry change:
>
> Microsoft Windows SecurityCenter.FirewallOverride
> (SBI $0C94D702) settings
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride
> (is not) dword:0
>
> What does it mean and what would be advisable to do?
>


I know this post is very, very late, but I just added this group.

If you are running an AntiVirus, like Symantec (aka Norton), they turn
off various Windows features because the AntiVirus handles these. The
"FirewallOveride" is just one of them.

The upshot is, with the AntiVirus installed, having these features in
Windows disabled is normal. SpyBot sees this. To prevent future
notices from SpyBot you use the set to ignore these problems as
follows:

Change to Advanced Mode
Settings (on sidebar)
Select Ignore Products
Click the Security.sb1 tab
Now use the checkboxes to set ignore for;
...Microsoft.Windows.AppFirewassBypass
...Microsoft.WindowsSecurityCenter.FirewallBypass
Change back to Default Mode

You should also set ignore for whatever else is normal for you, such
as the WindowsSecurityCenter overrides for Automatic Updates (I have
auto-updates turned off on my home system, I run Microsoft Updates
manually each Wednesday).

--
======== Tecknomage ========
Computer Systems Specialist
IT Technician
San Diego, CA
 >> Stay informed about: Spybot scans registry change... 
Back to top
Login to vote
FromTheRafters

External


Since: Apr 01, 2009
Posts: 8



(Msg. 9) Posted: Wed Apr 01, 2009 1:36 pm
Post subject: Re: Spybot scans registry change... [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"Tecknomage" wrote in message


> I know this post is very, very late, but I just added this group.
>
> If you are running an AntiVirus, like Symantec (aka Norton),

Symantec Antivirus and Norton Antivirus are not the same thing.

> they turn
> off various Windows features because the AntiVirus handles these. The
> "FirewallOveride" is just one of them.
>
> The upshot is, with the AntiVirus installed, having these features in
> Windows disabled is normal. SpyBot sees this.

I know many will consider this nitpicking, but Spybot is malware and
Spybot Search & Destroy is antimalware.
 >> Stay informed about: Spybot scans registry change... 
Back to top
Login to vote
Vucbucket

External


Since: Apr 01, 2009
Posts: 1



(Msg. 10) Posted: Wed Apr 01, 2009 6:27 pm
Post subject: Re: Spybot scans registry change... [Login to view extended thread Info.]
Archived from groups: alt>comp>virus (more info?)

FromTheRafters wrote:
> "Tecknomage" wrote in message
>
>
>> I know this post is very, very late, but I just added this group.
>>
>> If you are running an AntiVirus, like Symantec (aka Norton),
>
> Symantec Antivirus and Norton Antivirus are not the same thing.
>
>> they turn
>> off various Windows features because the AntiVirus handles these. The
>> "FirewallOveride" is just one of them.
>>
>> The upshot is, with the AntiVirus installed, having these features in
>> Windows disabled is normal. SpyBot sees this.
>
> I know many will consider this nitpicking, but Spybot is malware and
> Spybot Search & Destroy is antimalware.

Arse biscuits! Now I have to go back to making an effort!

Are you sure it isn't suffieicent to omit the uppercase B?


Dr. R.R-S
 >> Stay informed about: Spybot scans registry change... 
Back to top
Login to vote
(1 vote)
Display posts from previous:   
Related Topics:
Spybot scanner mentions registry change; what does it mean? - Hello, This is the registry change Spybot R&D mentions: Microsoft Windows SecurityCenter.FirewallOverride (SBI $0C94D702) Instellingen HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride (is not) dword:0 What does it mean and wh...

Spybot S&D Allow Change Problem - Hi all I would really appreciate it if someone could tell me how to sort out the following problem: In the last couple of weeks, when I run Spybot and it detects a change in the startup page, I am unable to allow the change. The check box in the....

Spybot S&D Allow Change Problem - Hi all I would really appreciate it if someone could tell me how to sort out the following problem: In the last couple of weeks, when I run Spybot and it detects a change in the startup page, I am unable to allow the change. The check box in the..

spybot registey change notice - What does this mean Sybot - Search & Destroy has detected an important registry entry that has been changed. Category: Browser page Change: Value deleted Entry: Local Page Old data: %SystemRoot%\system32\blank.hm Thank you

Spybot - Registry changes? - Instead of just showing the familiar simple list of a few viruses/tracking cookies/possible trojans/etc in its list of Critical Objects, Spybot has now started reporting a whole kluge of stuff about Registry changes. They have no checkmark against them,....
   Security Forums (Home) -> Spybot S&D All times are: Pacific Time (US & Canada)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Warning: fopen(/home/adsense_reject.txt) [function.fopen]: failed to open stream: Permission denied in /home/autoforu/public_html/Giga/GigaFunctions.php on line 1142

Warning: fwrite(): supplied argument is not a valid stream resource in /home/autoforu/public_html/Giga/GigaFunctions.php on line 1143

Warning: fclose(): supplied argument is not a valid stream resource in /home/autoforu/public_html/Giga/GigaFunctions.php on line 1144



[ Contact us | Terms of Service/Privacy Policy ]