[Shane7]

After casually scanning my computer for malware and expecting to find nothing, (as I do not visit any nasty websites), I found that Malwarebytes detected the following:: (One registry infection)

Malwarebytes' Anti-Malware 1.38
Database version: 2335
Windows 6.1.7100
6/25/2009 7:31:43 PM
mbam-log-2009-06-25 (19-31-43).txt
Scan type: Full Scan (C:\|)
Objects scanned: 146465
Time elapsed: 10 minute(s), 18 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explo rer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)


How on earth did I get this? Is it even a real infection? What is it?? How can I prevent it??

Help? :-/

[NeonFx]

Hi there

See information here:
http://www.insidetheregistry.com/reg...sp?valueid=255

It is a setting that is typically not enabled, and if it is, MBAM will consider this suspicious behavior.

Here is someone else with your same question, along with several answers:
http://forums.techarena.in/anonymity...am/1075636.htm

Network Administrators might prevent access to certain parts of the computer for security purposes. This is one of those settings that they commonly change.


By one of the administrators at MalwareBytes.org :

All this indicates is that the ability to make changes to active desktop is disabled and MBAM is attempting to enable it . If you don't want to see this again tell MBAM to ignore the scan result .

[Shane7]

Forgive me..but I'm still very much confused.

After reading all the material above, I still can't really decide whether or not malware actually infested my computer...

I just want to keep my data safe. That's all I'm really concerned about. :-/

Any more help? (If this is all a stupid concern, forgive my ignorance.)

[NeonFx]

Oh no, don't worry. This is not malware.

It is simply a setting on your computer that can be turned on and off. When it is turned on, it locks the access to active desktop. The program you ran just wanted to turn that off.

A security program on your computer could have turned it on as a security measure to protect the active desktop from being messed with. Or if you are part of a domain, your administrator could have set it manually to prevent people from messing with it.

[Shane7]

Thank you. :-) I appreciate your quick responses and willingness to help.