PDA

View Full Version : Spybot's detected a registry change, one I'm unsure about



Tombstone
2007-12-10, 21:40
As its Stop Sign that did it, after I learned about Stop Sign and such, I got Spybot, AVG, and other stuff, all yesterday.

Anyway first time I ran Spybot, it found random spam stuff etc And one was marked eAcceleration, so yeah, I let it delete it all, but 3 weren't able to be deleted from the eAcceleration, and I just like exited it before doing anything, anyway, it made Stop Sign break and such, it won't start itself up anymore =P and won't work etc, which was okay with me.

Onto the main part, I got this registry change before and clicked deny, now I got it again after restarting Windows when I got an update for it.

Category: System Startup global entry
Change: Value deleted
Entry:StopSignSsSsMon
Old data: Rundll32.exe "C:\Program Files\Acceleration Software\Anti-Virus\ssssmon.dll," VerifyStatus /ro.

So, what should I do/ Accept or Deny?

spybotsandra
2007-12-10, 23:10
Hello,

After you have deleted some items the changes have to make place in the registry also. As the resident TeaTimer alerts all registry changes you have to allow those in order to delete the stopsign stuff.
The message you have now shows you that stopsign was deleted.
Please read this information about TeaTimer:
http://www.safer-networking.org/en/faq/33.html
and http://www.safer-networking.org/en/faq/34.html
If you surf the web and without any user interaction the teatimer pops up and warns about a registry change it is better to "deny", but if you install or uninstall something by yourself it is OK to "allow" the change.

Best regards
Sandra
Team Spybot