ntuserdatlog changes every few seconds

Discussion in 'malware problems & news' started by SystemJunkie, Mar 31, 2006.

Thread Status:
Not open for further replies.
  1. SystemJunkie

    SystemJunkie Resident Conspiracy Theorist

    Joined:
    Mar 3, 2006
    Posts:
    1,500
    Location:
    Germany
  2. SystemJunkie

    SystemJunkie Resident Conspiracy Theorist

    Joined:
    Mar 3, 2006
    Posts:
    1,500
    Location:
    Germany
    looks like strange activities
     
    Last edited: Apr 2, 2006
  3. Paranoid2000

    Paranoid2000 Registered Member

    Joined:
    May 2, 2004
    Posts:
    2,839
    Location:
    North West, United Kingdom
    Yes, it's perfectly normal - ntuser.dat contains the user part of the Windows Registry which is constantly updated by Windows itself with the log file just containing the most recent changes.
     
  4. SystemJunkie

    SystemJunkie Resident Conspiracy Theorist

    Joined:
    Mar 3, 2006
    Posts:
    1,500
    Location:
    Germany
    Oh good to know, thanks for this info!

    It looked scary.
     
  5. Fysicus

    Fysicus Registered Member

    Joined:
    Nov 17, 2006
    Posts:
    1
    Recently I've noticed that the ntuserdat.log of the administrator account on my pc keeps on changing. Last night it happened again/

    I work on my own account and generally I leave my pc on running, locking my pc whenever I'm not on.

    Anybody here any ideas on what might have caused it?
     
  6. Paranoid2000

    Paranoid2000 Registered Member

    Joined:
    May 2, 2004
    Posts:
    2,839
    Location:
    North West, United Kingdom
    Most likely you have an application running as Administrator in the background (Windows services have such permissions by default). If you want to find the exact cause, you will need to use a registry monitor/firewall like RegDefend to identify the application and registry key involved.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.