The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    SPybot keeps telling me about a registry change... I don't know what is causing it....

    Discussion in 'Windows OS and Software' started by Justitia, Dec 1, 2006.

  1. Justitia

    Justitia Notebook Evangelist

    Reputations:
    91
    Messages:
    617
    Likes Received:
    0
    Trophy Points:
    30
    Everytime I turn on my ASUS laptop, spybot gives me a message about a program trying to change my registry. I can't figure out what is going. SOme times I accept it and sometimes I don't -- it doesn't seem to make a difference.

    Here is a copy of Spybot's log since this started:

    I fooled around once with changing my screensaver just before this happened -- but nothing since.... I thought that might be it so I tried accepting the change. But it did not help.

    Has something infected my computer?
     
  2. Zellio

    Zellio The Dark Knight

    Reputations:
    446
    Messages:
    1,464
    Likes Received:
    0
    Trophy Points:
    55
    You got a trojan infection.

    Download these programs:

    Ad-aware
    Spybot
    hijackthis
    a-squared
    nod32 (it has a free trial)
    rootkit revealer

    Update them all, then run them all in safe mode.

    If you have a rootkit, there's really no hope for your system except reformatting.
     
  3. Justitia

    Justitia Notebook Evangelist

    Reputations:
    91
    Messages:
    617
    Likes Received:
    0
    Trophy Points:
    30
    I already have NOD32 and SPybot running full time. I also regulary run Ad-aware.

    It says in my post that it is Spybot that is alerting me this everytime I turn on the computer, so clearly Spybot's resident program is running full time, along with NOD32.

    I am suspecting that it has something to do with my changing what the screen saver is when I shift from battery to AC mode. But I am not sure what I did. But I think I have a different screensaver setting for battery mode than the AC mode.

     
  4. Zellio

    Zellio The Dark Knight

    Reputations:
    446
    Messages:
    1,464
    Likes Received:
    0
    Trophy Points:
    55
    I looked it up.

    People with similar problems such as yours had a trojan infection.

    If you want the problem gone, try those programs.

    I'm actually not sure what it is, but some people who had trojan infections had it, it would be a safe bet to try those programs, and keep them.

    Hum, after reading a few more topics about it, it may be nothing. Googling it may be a bad/good idea. But anythign automatically changing your registry is bad. Hang on, gonna google some more.
     
  5. Zellio

    Zellio The Dark Knight

    Reputations:
    446
    Messages:
    1,464
    Likes Received:
    0
    Trophy Points:
    55
    Okay... I'm getting somewhere...

    Download hijackthis and post your hijackthis log here... After googling it, I may be able to help.

    BINGO

    http://forums.spybot.info/showthread.php?t=8508&page=2

    You're not gonna like this, but you've got problems. Once again, download those programs like I said.
     
  6. Justitia

    Justitia Notebook Evangelist

    Reputations:
    91
    Messages:
    617
    Likes Received:
    0
    Trophy Points:
    30
    Thanks for the link... that was very helpful. Reading he thread you linked to, it almost sounds like it is spybot's snapshot that is out of sync.

    See post here: http://forums.spybot.info/showpost.php?p=50700&postcount=17

    The guy asking for help has the same screensaver.exe changes in his log.

    I have to get something done tonight but I will try what you suggest tomorrow (Monday) evening.