I recently was concerned that I may have been infected with a worm/ virus, etc, so I have been researching and trying to take some steps against it.
I have SPySweeper anvtivirus/ antispyware installed, and I also have ZoneAlarm installed as my firewall.
On the advice of some other forums I decided to install also other anti-spyware and run them. Yesterday I was having troub;e connecting to the wireless connection and when I put my computer on "sleep" I could not resume the computer. When I forced shutdown, which the computer asked me if I want to open in Safe Mode, which I did, with networking.
In safe mode, I installed Spybot S & D and ran a check. It found several things which Spysweeper had not detected. I removed them all.
It also notified my that Spysweeper was attempting to change its own registry setting. The change seemed to involved a change from the normal registry entry to one that has quotes "" wrapped around it. I refused this change.
Then when I re-opened Vista in normal mode, I am continually (every few seconds) getting notice from Spybot S & D that it is automatically refusing the registry change.
Then today when I open Windows media Player I get the same notice of a change to the registry - involving adding or removing quotes to the registry entry.
Spybot entry reads:
Current filename: C:\Program Files\Windows Media Player\WMPNSCFG.exe
Database status: Necessity depends on users preferences
"Microsoft Windows uses wmpnscfg.exe to alert users when media rendering devices are found on the network. Wmpnscfg starts the Windows Media Player Network Sharing Service (NSS) and then waits for notifications from the service. When wmpnscfg is notified that a new media device is available on the network, it displays a popup in the system tray that informs the user about the availability of the new device. If the user clicks the popup, wmpnscfg launches Windows Media Player, which displays a dialog box that asks the user to either allow or deny sharing with the new device."
Is this a sign that some Malware is trying to change my registry entries, or is it a conflict between the two programs?
It is really strange to me to have these notices from Spybot continually coming up every few seconds, and I think it cannot be normal.
Please help! Thanks...