Winlogon Value Change message Teatimer

[Hayem]

When I start windows TeaTimer enabled I am getting this message
Winlogon
Value Changed
Entry:shell
old data:explorere.exe
new data: explorere.exe C:\WINDOWS\help\svchost.exe

and don't know what to do.What is this message and is it safe to Allow Change?thanks in advance for your help.

you can see the exact message here

http://www.hayavedmontreal.com/images/messagelog.jpg

[Zenobia]

You might want to Deny that for now,and you should get checked out in Malware Removal.

The instructions are here:
http://forums.spybot.info/showthread.php?t=288

Malware removal:
http://forums.spybot.info/forumdisplay.php?f=22

[Hayem]

You might want to Deny that for now,and you should get checked out in Malware Removal.

The instructions are here:
http://forums.spybot.info/showthread.php?t=288

Malware removal:
http://forums.spybot.info/forumdisplay.php?f=22

Solved I have downloaded SUPERAntiSpyware and was able to detect and remove the variant,thanks anyway for your help.

[Zenobia]

That's good,glad to hear that.You're welcome.