rayray

Autorun - False Positive?

Recommended Posts

Online Armor reports the following autorun as detected:

 

Module: {4ED3A719-CEA8-4BD9-910D-E252F997AFC2}

 

PAaaSOZ.png

 

Not sure what it is, but I'm guessing it has something to do with Windows.  Any ideas?

 

I'm not the only one that has this problem.  Another person reported this on another forum:

http://turbolab.it/forum/viewtopic.php?p=14934&sid=299496a48d988b3d27c6e2876f7c7fd7#p14934

Share this post


Link to post
Share on other sites

Based on what I am seeing on Google, that appears to be a CLSID from a registry entry that loads the file twinui.dll which is a Windows system file on Windows 8.

Share this post


Link to post
Share on other sites

I am not sure why my post was deleted but I have no issue asking the question again.

 

I get the same alert and I have Windows 8.1 Professional.  Please advise if this autorun is safe to allow or should it be blocked and if so, why?

 

Thanks

 

Mark

Share this post


Link to post
Share on other sites

Where is the support on this? Is the safe to run?

 

Summary:      Autorun detected: {4ED3A719-CEA8-4BD9-910D-E252F997AFC2}
Description:  {4ED3A719-CEA8-4BD9-910D-E252F997AFC2}
Event type:   Autorun(10)
Event action: Allowed(2)

Share this post


Link to post
Share on other sites

Mark, I answered this question for you via e-mail on February 28th. It is a file from Microsoft and we recommend allowing it.

Share this post


Link to post
Share on other sites

Certificates used by Microsoft to digitally sign their files are whitelisted. The notification he's seeing is not normal, but the file is safe. If he has the registry monitoring on, then it may be matching a custom rule that he has set up.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.