• An important registery change, possibly a virus?
    0 replies, posted
Ok, so i was starting up my computer, all my programs loaded, including Spybot S&B(Including tea timer, which is So post to be off, Resident didn't load though...), Anyway, i got this here pop up: [img]http://img46.imageshack.us/img46/9500/sbsadm.png[/img] For those who can not see the image: Spybot - Search and Destroy has detected an important registry entry that has been changed. Category: Season Manager Change: Value Added Entry: Bootexecute Old data: New data: Autocheck autochk *\ [o] Remember this decision [Allow change] [?] [Deny change] ---------------------------------------------------------------------------------- What is this? should i allow the change or deny it? Is this something i should be worried about(because Tea timer does freak me out when it pops these messages up........ a lot......) UPDATE: POSSIBLE AWSNER vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv HKLM\SYSTEM\CurrentControlSet\Control\Session Manager Data type Range Default value REG_BINARY Command or executable program autocheck autochk * Description: Specifies the applications, services, and commands executed during startup. For example, if Convert.exe has been used to convert the file system on a hard disk drive, you can add the following command to BootExecute to convert the file system when Windows 2000 is restarted: BootExecute = autocheck autoconv \DosDevices\x: /FS:NTFS Note: Do not delete the default value, autocheck autochk *, from the value of BootExecute. To prevent Autochk.exe from running on specific volumes or from running at all, use Chkntfs.exe. Tip: For more information on Autochk, Chkntfs, and Convert, see the Microsoft Knowledge Base link on the Web Resources page. Search the Knowledge Base using the keywords Autochk, Chkntfs, and Convert. ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Stolen from microsoft's technet thing :P -- [url]http://technet.microsoft.com/en-us/library/cc963230.aspx[/url] -- I allowed it, now theres another problem: All of above, but the entry is: Executefromallknowndlls no new value no old value -- i just allowed it, i'm tired of waiting, im playing gmod now, and nothing will stop me!
Sorry, you need to Log In to post a reply to this thread.