ITstudent2006
Oct 12, 2010, 08:04 AM
I did a scan on an infected PC and it said that the following registry keys are infected.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\System\NoDispScrSavPage (Hijack.DisplayProperties)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\Explorer\NoSMHelp (Hijack.Help)
Anyone know of malware that attacks these keys specifically. Or have any ideas on how to get rid of it. FYI it is a corporate PC. (corporate AV/AS didn't detect it and can't remove it)
Rick
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\System\NoDispScrSavPage (Hijack.DisplayProperties)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\Explorer\NoSMHelp (Hijack.Help)
Anyone know of malware that attacks these keys specifically. Or have any ideas on how to get rid of it. FYI it is a corporate PC. (corporate AV/AS didn't detect it and can't remove it)
Rick