Spybot scan Allow/Deny changes?

Hello,
I'm new here and have found some great help so far. I have a question though that I don't seem to find an answer to in here..
After running a spybot scan, I get spybot pop up messages when I'm done telling me that... Spybot S&D has detected an important registry entry that has been changed, giving me the category, change: (value deleted, added or changed) an entry # a mile long, old data (often times blank) and the choice to allow change or deny change. The question is.... is this spybot telling me that it's made a correct/good change or that whatever it found made a bad/wrong change? Am I supposed to allow or deny these changes? I can't find anything in the tutorials or anywhere that explains this. I've just been guessing and hoping I'm right. So far everything is working ok, but I'm a bit nervous when it comes to choosing allow or deny.

 

Basically, what it is telling you is that something has been added to your system, such as a BHO (browser help object, like a toolbar or toolbar button). If you get this message right after installing the program the alert mentions, you're probably okay with allowing it. However, if the program mentioned isn't one you just installed, it's most likely malware trying to infect your system and should be denied. From personal experience (see the topic I started in this forum), you probably want to double-check your choices before clicking on the okay button.

 

Since I'm not installing anything new after these scans, I guess I'm doing the right thing by denying the changes. Thanks for your quick reply.

 

I definitely know what you are feeling. That's exactly what's happeningto me right now. It is with regards to an about:blank hijack that I have and trying to fix at this moment(with help from here of course). I have no clue if my orig. homepage(MSN) is trying to take back the browser from the hijacker or the other way around 'cuz i tried both ways(allow/deny) and it is still the about:blank page that pops up. I will try the advice posted here and see what happens and i will keep track of this thread.

 

Open up "Internet Options". By experimenting with changing the homepage there (after copying your current homepage so you can change it back) and noticing how SSD reacts to it, you should be able to ascertain when you should allow the change and when you shouldn't.
(I would do this myself, but I've got the three choices under the homepage section blocked out so that they can't be changed accidently).

 

The popups are from Teatimer, Spybot's handy resident registry protector. They have to do with registry modifications, not with what applications are doing. Teatimer is useful, though, because if something messes around with your registry, it will tell you.

 

Thanks for your input. Little by little I'm learning and understanding this stuff as it happens. I just deleted the "my search" on my IE toolbar and got a pop up in regards to that, so I knew to allow that one. Thanks a bunch!