Spybot scan Allow/Deny changes?

Discussion in 'other anti-malware software' started by DeBrat, Jun 6, 2004.

Thread Status:
Not open for further replies.
  1. DeBrat

    DeBrat Registered Member

    Joined:
    Jun 4, 2004
    Posts:
    3
    Hello,
    I'm new here and have found some great help so far. I have a question though that I don't seem to find an answer to in here..
    After running a spybot scan, I get spybot pop up messages when I'm done telling me that... Spybot S&D has detected an important registry entry that has been changed, giving me the category, change: (value deleted, added or changed) an entry # a mile long, old data (often times blank) and the choice to allow change or deny change. The question is.... is this spybot telling me that it's made a correct/good change or that whatever it found made a bad/wrong change? Am I supposed to allow or deny these changes? I can't find anything in the tutorials or anywhere that explains this. I've just been guessing and hoping I'm right. So far everything is working ok, but I'm a bit nervous when it comes to choosing allow or deny.
     
  2. Emoticon Man

    Emoticon Man Registered Member

    Joined:
    Apr 26, 2004
    Posts:
    12
    Location:
    Salinas, CA, USA, Earth, Sol System
    Basically, what it is telling you is that something has been added to your system, such as a BHO (browser help object, like a toolbar or toolbar button). If you get this message right after installing the program the alert mentions, you're probably okay with allowing it. However, if the program mentioned isn't one you just installed, it's most likely malware trying to infect your system and should be denied. From personal experience (see the topic I started in this forum), you probably want to double-check your choices before clicking on the okay button.

     
  3. DeBrat

    DeBrat Registered Member

    Joined:
    Jun 4, 2004
    Posts:
    3
    Since I'm not installing anything new after these scans, I guess I'm doing the right thing by denying the changes. Thanks for your quick reply.
     
  4. bounty69sx

    bounty69sx Registered Member

    Joined:
    Jun 5, 2004
    Posts:
    46
    Location:
    Montana, USA
    I definitely know what you are feeling. That's exactly what's happeningto me right now. It is with regards to an about:blank hijack that I have and trying to fix at this moment(with help from here of course). I have no clue if my orig. homepage(MSN) is trying to take back the browser from the hijacker or the other way around 'cuz i tried both ways(allow/deny) and it is still the about:blank page that pops up. I will try the advice posted here and see what happens and i will keep track of this thread.
     
  5. Emoticon Man

    Emoticon Man Registered Member

    Joined:
    Apr 26, 2004
    Posts:
    12
    Location:
    Salinas, CA, USA, Earth, Sol System
    Open up "Internet Options". By experimenting with changing the homepage there (after copying your current homepage so you can change it back) and noticing how SSD reacts to it, you should be able to ascertain when you should allow the change and when you shouldn't. :)
    (I would do this myself, but I've got the three choices under the homepage section blocked out so that they can't be changed accidently).

     
  6. Pigman

    Pigman Registered Member

    Joined:
    May 15, 2004
    Posts:
    381
    The popups are from Teatimer, Spybot's handy resident registry protector. They have to do with registry modifications, not with what applications are doing. Teatimer is useful, though, because if something messes around with your registry, it will tell you.
     
  7. DeBrat

    DeBrat Registered Member

    Joined:
    Jun 4, 2004
    Posts:
    3
    Thanks for your input. Little by little I'm learning and understanding this stuff as it happens. I just deleted the "my search" on my IE toolbar and got a pop up in regards to that, so I knew to allow that one. Thanks a bunch!
     
Thread Status:
Not open for further replies.