Hi Ekhart, Sunday, May 4, 2008, 3:48:42 PM, you wrote: EGlnl> Yes, but the number of false positives in fact depends on the relevant EGlnl> setting chosen. And it seems false positives were weighted too much in I set it to max, and then scanned, and nothing was reported. EGlnl> Thanks, but i'm very busy, so i'll have to wait a while. Yes, you've been quite busy writing emails. ;) >> I'll also install Avira; I'll see if I can give you an easier way to >> disable that message. EGlnl> Easier than right clicking and denying right to execute or EGlnl> installing ProcessGuard? No, the instructions that you posted also listed restarting in safe mode, which is needed for XP Home. Here's what I did, but I don't know if it'll work or not until a new update is available: I renamed the file, and created a folder with the same name. Hmm, just occurred to me that it might open the folder. Oh well, will find out when it happens, eh? :) EGlnl> If you can find an easier solution than the execution denial, EGlnl> you'll be famous soon. The Internet is full of discussions of EGlnl> this topic. The execution denial can be done from the command line, but I'd have to look it up, and you'd have to download the tool. EGlnl> control panel->> administrative tools-> local security EGlnl> policy->software restriction policies->additional rules->new EGlnl> path rule-> choose the path of avnotify.exe (default is EGlnl> C:\Program Files\AntiVir PersonalEdition Classic\avnotify.exe) EGlnl> and the security level (disallowed). You might be able to export "HKLM\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\0" to a *.reg file; would have to test it. The same info is saved under HKCU, but is probably not needed there. The hash method would only work for that specific version of the file, although it would work even if someone copied the file elsewhere in order to run it. -- Scott. -- -------list-services-below----------- Regards, John Durham (list moderator) <http://modecideas.com/contact.html?sig> Freelists login at //www.freelists.org/cgi-bin/lsg2.cgi List archives at //www.freelists.org/archives/pchelpers PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig Latest news live feeds at http://modecideas.com/indexhomenews.htm?sig Good advice is like good paint- it only works if applied.