After installing 1.5.2 on Windows XP SP2, I started running resident protection (which I had never done under 1.4 or previous versions). After some time, "popups" started occurring concerning an important registry value (DefaultUserName) being changed in Winlogon! every time after another user had previously logged on and off. Whitelisting sometimes ALMOST worked (there was a notification but no manual input required) but mostly NOT and the whitelist entries would often disappear with alternating user logons. In desperation, I uninstalled 1.5.2 and reinstalled and the problem appeared to be solved for several days -- alas, now it has returned!
AFAIK DefaultUserName WILL be changed every time a different user logs on and I don't understand why 1.5.2 suddenly starts caring and why this change can't be ignored! This all may just be an artifact of my ignorance but I'd sure appreciate enlightenment so I can turn resident protection back on. Thanks.
(FWIW I have 1.5.2 installed on another Windows XP SP2 system but haven't seen this behavior there -- SO FAR!)