Saturday, February 06, 2010

What is Hijack.DisplayProperties?

Relax, it is a false positive most likely after running a Malwarebytes Anti-Malware scan. If you Google the term "hijack.displayproperties" you will see forums where people have found the same thing and also reached the conclusion that you should not remove the registry entry and white-list it.

Below is the scan log:


Malwarebytes' Anti-Malware 1.44
Database version: 3697
Windows 6.1.7600
Internet Explorer 8.0.7600.16385

2/6/2010 4:04:42 PM
mbam-log-2010-02-06 (16-04-36).txt

Scan type: Quick Scan
Objects scanned: 100164
Time elapsed: 2 minute(s), 1 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

No comments: