winlogon in system start run

For those still confused/worried about those entries, see
http://forums.net-integration.net/index.php?showtopic=20936

For XP, the basic normal subkeys at

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
are

crypt32chain
cryptnet
cscdll
ScCertProp
Schedule
sclgntfy
SensLogn
termsrv
wlballoon

You may have one or two other legitimate ones, depending on your system, e.g. I have one related to my ATI Radeon card, AtiExtEvent

Don't delete or uncheck these from the startup, your system either won't start or not function as expected without most of them, anyway!

 

Thanks JR

Below is a link that lists the new additions to the beta version of the main application found at the Official Spybot Search & Destroy Forums for those interested in what "patrick kolla up to" or Announcements about Spybot and it's releases.

This Link---> Spybot S&d Update Information 8-6-2004

 

Thanks for the info bubba! My questions are finally answered.

 

Hi all,

Thanks for that- I have now located these entries with Sysinternals autostart viewer too and can see that they refer to nothing untoward.

Assistance appreciated.

regards,

Chris

 

This one belongs to PCInternetPatrol