[ITstudent2006]

I did a scan on an infected PC and it said that the following registry keys are infected.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\System\NoDispScrSavPage (Hijack.DisplayProperties)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\Explorer\NoSMHelp (Hijack.Help)

Anyone know of malware that attacks these keys specifically. Or have any ideas on how to get rid of it. FYI it is a corporate PC. (corporate AV/AS didn't detect it and can't remove it)

Rick

[KoolAide187]

Those don't look like malware my friend. Those looks like the scanner you used wants you to fix those by re-enabling the notification of those alerters on Microsoft so they can continue to pop up and annoy you. The second one looks like it turns off your screen saver from coming on. And the third looks like its diables help from poping up. These are probably perfectly fine to have a malware/spyware scanner to find. If you want you can have it fix them but in my opinion is those are disabled because they are annoyances that Microsoft throws at you. Not so much the screen saver but the rest I'd say you they are probably all fine to stay disabled the way they are. You don't have any spyware/malware from what I can tell man. Good luck. I hope this helps.

[ITstudent2006]

Yeah I figured that out after writing this. I ran another scan after and found the malware buried deep in the temp internet files.

Thanks for the info.

Rick