| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 48851 | 2004-09-03 00:23:00 | WinLogon in Startup List | andrew93 (249) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 268698 | 2004-09-03 00:23:00 | I recently installed SP2 for Windows XP Pro - I know I said it was pretty seamless and problem free in Bruce's thread but there is one thing I have noticed since the upgrade. If I look at the System Startup list under the Spybot Advanced Mode, there 10 new entries under the key "WinLogon". When I mentioned this to a tech friend he freaked saying it was a common trojan horse. I then had a look around Google using the command line entries and only found references to Windows encryption stuff and have not had any odd experiences (that I am aware of, yet, touch wood), so am not too concerned. The Windows firewall is enabled, I am using Spybot 1.3 with the latest definitions, various scans are showing up no funnies but now I am curious as to what these are and why they are there. The actual items in the startup list are (value & command line) : crypt32chain : crypt32.dll cryptnet : cryptnet.dll cscdll : cscdll.dll igfxcui : igfxsrvc.dll ScCertProp : wlnotify.dll Schedule : wlnotify.dll sclgntfy : sclgntfy.dll SensLogn : WlNotify.dll (not sure why this one has caps) termsrv : wlnotify.dll wlballoon : wlnotify.dll I checked a few of these and they are located in the Windows\system32\ directory. My questions are : Has anyone else had this experience? Is something I should be worried about? I'm about to disable each and every one of these and see what happens (if anything) at the next startup - but would like to hear other users thoughts first. Andrew |
andrew93 (249) | ||
| 268699 | 2004-09-03 00:34:00 | BTW I am using the Beta version of Spybot and I have just found this (forums.net-integration.net). which mentions that 9/10 of these are ok : crypt32chain cryptnet cscdll ScCertProp Schedule sclgntfy SensLogn termsrv wlballoon So what is igfxcui in my list? Any ideas anyone? |
andrew93 (249) | ||
| 268700 | 2004-09-03 08:39:00 | a quick trip to a search engine tells me its somethin to do with graphics drivers | drcspy (146) | ||
| 268701 | 2005-09-27 14:45:00 | hi :) please excuse my english. i'm mexican and trying to help with that startup list i found that "keys" on my pc and i disable all. the only one thing i notice about this is that now every time i power on my pc this show the login screen showing the account of the administrator. in my pc that is the only account i have, i don't have any other users registered and before i disable that keys, my pc never shows that login screen. i hope this help to us to understand this "ocult keys" :waughh: Ahora en español :) For favor disculpen mi ingles. Soy mexicano y estoy tratando de ayudar with la lista de inicio. Me encontre esas "claves" en mi PC y las inhabilite. La unica cosa que note con estos es que cada vez que prendo mi PC, esta muestra la pantalla de login, mostrando la cuenta del administrador. En mi PC es la unica cuenta que tengo, no tengo ningun otro usuario registrado y antes de inhabilitar esas claves, mi PC nunca mostraba la pantalla de login. Espero que esto nos ayude a entender estas "claves ocultas". :rolleyes: |
cPaulin (6115) | ||
| 1 | |||||