I did a Defender scan on 5/20/09 and it showed the following in History:

Name = Unknown
Alert Level = Unknown
Action Taken = Permit
Status = Succeeded
Description = This program has potentially unwanted behavior.
Advice = Permit this detectede item only if you trust the program or the
software publisher.
Resources = C:\Windows\system32\drivers\etc\hosts
Category = Not Yet Classified

I did another scan on 5/25/09 and same item showed up.

Is anyone else showing this 'exception' in Defender History after running a
scan?
Is this serious?
Would appreciate any help in determining what this 'exception' relates to.

Thank you
Alice

Hello Alice,

Under WD, click Tools->Options and under real-time protection examine the
boxes for Choose if WD should notify you about.

Since WD was not instructed
to notify you, it Permitted the action automatically.

WD is too stupid to know who is attempting to
change the registry.
-=-


"AliceZ" wrote:
[color=blue]
>
> I did a Defender scan on 5/20/09 and it showed the following in History:
>
> Name = Unknown
> Alert Level = Unknown
> Action Taken = Permit
> Status = Succeeded
> Description = This program has potentially unwanted behavior.
> Advice = Permit this detectede item only if you trust the program or the
> software publisher.
> Resources = C:\Windows\system32\drivers\etc\hosts
> Category = Not Yet Classified
>
> I did another scan on 5/25/09 and same item showed up.
>
> Is anyone else showing this 'exception' in Defender History after running a
> scan?
> Is this serious?
> Would appreciate any help in determining what this 'exception' relates to.
>
> Thank you
> Alice[/color]

Thank you.
Are the two 'exceptions' my WD found 'normal?' Are they registry changes
that are okay to be approved? Does everyone see them?
Should I be notified about them or should I choose not to notify?
Thanks again,
Alice

===============
"Ǝиçεl" wrote:
[color=blue]
> Hello Alice,
>
> Under WD, click Tools->Options and under real-time protection examine the
> boxes for Choose if WD should notify you about.
>
> Since WD was not instructed
> to notify you, it Permitted the action automatically.
>
> WD is too stupid to know who is attempting to
> change the registry.
> -=-
>
>
> "AliceZ" wrote:
>[color=green]
> >
> > I did a Defender scan on 5/20/09 and it showed the following in History:
> >
> > Name = Unknown
> > Alert Level = Unknown
> > Action Taken = Permit
> > Status = Succeeded
> > Description = This program has potentially unwanted behavior.
> > Advice = Permit this detectede item only if you trust the program or the
> > software publisher.
> > Resources = C:\Windows\system32\drivers\etc\hosts
> > Category = Not Yet Classified
> >
> > I did another scan on 5/25/09 and same item showed up.
> >
> > Is anyone else showing this 'exception' in Defender History after running a
> > scan?
> > Is this serious?
> > Would appreciate any help in determining what this 'exception' relates to.
> >
> > Thank you
> > Alice[/color][/color]

Just an Add-On....

I went to Defender / Tools / Options, and checked the two Notification
Boxes. Then when I was working on/in computer, I got a pop-up that Defender
wanted my permission to allow a change to the same file (HOSTS). I believe I
might have downloaded an update for AVG or SpyBot or Spyblaster.

When I went to History I saw the same 'exception' that I saw before, namely:

Resources = C:\Windows\system32\drivers\etc\hosts
Category = Not Yet Classified

It doesn't show any Publisher, etc.; so I don't know which program is
causing this 'exception.'
Could it be caused by my AVG 8.5; SpyBot or SpyBlaster? If so, is it alright
to PERMIT the change? For if I didn't maybe one of the programs would not
function properly.
How am I supposed to know which Defender pop-ups to PERMIT or DENY?

Thanks for any help.
Alice

=========================
"AliceZ" wrote:
[color=blue]
> Thank you.
> Are the two 'exceptions' my WD found 'normal?' Are they registry changes
> that are okay to be approved? Does everyone see them?
> Should I be notified about them or should I choose not to notify?
> Thanks again,
> Alice
>
> ===============
> "Ǝиçεl" wrote:
>[color=green]
> > Hello Alice,
> >
> > Under WD, click Tools->Options and under real-time protection examine the
> > boxes for Choose if WD should notify you about.
> >
> > Since WD was not instructed
> > to notify you, it Permitted the action automatically.
> >
> > WD is too stupid to know who is attempting to
> > change the registry.
> > -=-
> >
> >
> > "AliceZ" wrote:
> >[color=darkred]
> > >
> > > I did a Defender scan on 5/20/09 and it showed the following in History:
> > >
> > > Name = Unknown
> > > Alert Level = Unknown
> > > Action Taken = Permit
> > > Status = Succeeded
> > > Description = This program has potentially unwanted behavior.
> > > Advice = Permit this detectede item only if you trust the program or the
> > > software publisher.
> > > Resources = C:\Windows\system32\drivers\etc\hosts
> > > Category = Not Yet Classified
> > >
> > > I did another scan on 5/25/09 and same item showed up.
> > >
> > > Is anyone else showing this 'exception' in Defender History after running a
> > > scan?
> > > Is this serious?
> > > Would appreciate any help in determining what this 'exception' relates to.
> > >
> > > Thank you
> > > Alice[/color][/color][/color]