I got this pop up message from McAfee on my computer and I do not know if I should click "allow" or "block". Can someone tell me what this is and what I should do. It is a new computer and I am not a computer teckie.
Thanks


McAfee has detected a potentially unauthorized file change to your computer.

About this File Change
SystemGuards: Windows Win.ini File
Program: Host Process for Windows Services
Location: C:\Windows\SysWOW64\svchost.exe

Spyware, adware, and other potentially unwanted programs can make changes to the Win.ini file, allowing suspect programs to run when you start your computer.

Quote:

---

Originally Posted by citylover

Can someone tell me what this is and what i should do.

---

The svchost.exe process is a part of Windows and the one located in that particular folder is the 32 bit version used on versions of Windows that are 64 bit. The 64 bit version is in the... \Windows\System32 folder. Backwards yes, but done for compatibility. Not knowing more about why McAfee is complaining about this since this process should have already been vetted, suggest you do this:
1. Make a copy of the Win.ini file.
2. Allow the action.
3. Compare the contents of the current Win.ini file to those of the copy made and note the differences and decide if they are reasonable or facilitate malware.
4. Undo or remove the changes if they facilitate malware and then do a full system scan with McAfee.

If the above seems too technical, choose block. Better safe than sorry.

Additional info:
What is svchost.exe And Why Is It Running?
A description of Svchost.exe in Windows XP Professional Edition