PDA

View Full Version : Spybot keep prompting Winslogon change even after denying



euchre
2008-06-06, 07:38
Below was the error message from Spybot.

Spybot - Search and Destroy has detected an important registry entry that has been changed.

Category : Winslogon
Change : Value Changed
Entry : UserInit
Old Data : C:\WINDOWS\system32\userinit.exe
New Data : C:\WINDOWS\system32\userinit.exe\WIN


I have deny the change but it keeps popping up again and again. When I select remember this decision, I get many pop-ups saying I have blacklisted it in the system tray then slowly it will close by itself.

I have perform a scan and use Spybot to fix 4 entries. After that I did another scan and no spywares were found but this pop-up thingy is annoying. Will it crash the system too? I am using WinXP SP2.

No software were installed before or when the error msg first came up. Is it safe to allow the changes? I usually justs deny everything.

Any help would be appreciated. Thanks in advance.

spybotsandra
2008-06-06, 12:40
Hello,

So did you log in with another user account?

Please read this information about TeaTimer:
http://www.safer-networking.org/en/faq/33.html
and http://www.safer-networking.org/en/faq/34.html
If you surf the web and without any user interaction the teatimer pops up and warns about a registry change it is better to "deny", but if you install something by yourself it is OK to "allow" the change.
The tutorial (point 8) on our homepage should also help explaining:
http://www.safer-networking.org/en/tutorial/index.html

Best regards
Sandra
Team Spybot