PDA

View Full Version : registry change question



SpyBot68
2011-06-23, 00:26
Just received a message that said:
REGISTRY ENTRY CHANGED

Category: Winlogon
Change: Value changed

Entry: UserInit

Old data: C:\Windows\system32\userinit.exe,C:\ProgramData\konasys32\gska\obesy.exe,
New data: C:\Windows\system32\userinit.exe,


What does this mean?

tashi
2011-06-23, 16:23
Hello,


Old data: C:\Windows\system32\userinit.exe,C:\ProgramData\konasys32\gska\obesy.exe,
New data: C:\Windows\system32\userinit.exe,

Was there anything else after the comma? :)

Best regards.

SpyBot68
2011-06-23, 18:12
thanks for repling, Tashi! No there wasn't.
-SB-6-8

tashi
2011-06-23, 20:09
Hello SpyBot68,

Spybot-S&D's resident teatimer replaced the old data which appears to be malware. C:\ProgramData\konasys32\gska\obesy.exe,
How Spybot-S&D protects against the installation of Spyware/Malware. (http://forums.spybot.info/showthread.php?t=281)

How is the computer running, has it shown signs of infection? Also what is the operating system and security software installed.

Best regards. :)