Poochy
2007-02-05, 07:50
I had a bit of trouble getting .JAR files to run with the Java Runtime Environment (they started hogging the CPU and took a long time to load), so I rebooted my computer. The XP login screen came up in 16-color resolution, so I rebooted again using Last Known Good Configuration, and that worked. Then, upon logging in, I got the usual couple registry change notices from the Spybot Resident (Java Update, etc.) But at the end of them were two that I had never even heard of, and I thought they were suspicious:
Category: Session Manager
Change: Value deleted
Entry: BootExecute
Old data: hex(7): 61,75,74,6F,63,68,65,63,6B,20,61,75
Category: Session Manager
Change: Value deleted
Entry: ExcludeFromKnownDLLs
Old data: hex(7): 00"
I tried denying both of them, but they both reappeared immediately. I then ran scans with Ad-Aware and Spybot, and they both came up with nothing. Should I be worried here?
Category: Session Manager
Change: Value deleted
Entry: BootExecute
Old data: hex(7): 61,75,74,6F,63,68,65,63,6B,20,61,75
Category: Session Manager
Change: Value deleted
Entry: ExcludeFromKnownDLLs
Old data: hex(7): 00"
I tried denying both of them, but they both reappeared immediately. I then ran scans with Ad-Aware and Spybot, and they both came up with nothing. Should I be worried here?