Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Ad Aware "registry Modification Detected"


  • This topic is locked This topic is locked
2 replies to this topic

#1 sbruce

sbruce

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Location:USA
  • Local time:09:39 AM

Posted 07 June 2006 - 09:33 PM

ad aware screen pops up and says "registry modification detected". should i do something?
it often happen while surfing. i have paid version. windows xp home OS. ty


(Moderator edit: topic title edited for clarity. jgweed)

Edited by jgweed, 07 June 2006 - 10:26 PM.

XP Pro 2002, SP 2; HP Intell T2400 1.83 GHz
987 Mhz .099 GB RAM; MS Outlook; Anti virus: AVAST; LAVASOFT Ad-aware;
Firefox 2.0.0.9

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:39 AM

Posted 08 June 2006 - 08:45 AM

This is related to AdWatch which is in the paid version and alerts/prevents registry modifications. I don't use AdWatch but it is my understanding that it will alert to any new registry settings regardless if they are harmful or not (because it can't tell the difference) and let you accept or block unless you have "automatic blocking" enabled.

What were you doing prior to receiving the alert besides surfing? Did you install Ewido as just prior to the alert?

Can you post that portion of the log so we can see the details. It should look similar to these examples:

12/29/2004 11:03:13 PM - Registry modification detected
Root:HKEY_LOCAL_MACHINE
Key:SOFTWARE\Classes\.lnk
Value:
Data:
New Data:lnkfile

22/05/2005 05:45:42 - Registry modification detected
Root:HKEY_LOCAL_MACHINE
Key:SOFTWARE\Classes\exefile\shell\open\command
Value:
Data:"%1" %*
New Data:C:\WINNT\Fonts\lsass.exe "%1" %*

Please don't start a new topic for each problem. This makes it harder and confusing for anyone to help.

Edited by quietman7, 08 June 2006 - 08:51 AM.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:39 AM

Posted 08 June 2006 - 12:38 PM

Since I have now instructed you to post a hijackthis log in your other thread, I am closing this one to avoid confusion.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users