Learning mode during bootup?

Using v3.0.14.276 on WinXP Pro SP2, D+ seems to go into learning mode during bootup. I have paranoid mode on, but it seems that sometimes upon bootup, instead of getting prompted for programs’ access, I see D+ is learning… xyz access the screen… etc.

If something doesn’t get caught, and gets put into the startup routine, this could be very bad as D+ will create policies to allow the malware to run.

Can someone set me straight?

Thanks,
-SW

Don’t know the full story, but if a program is already deemed allowed and it does something new, the new function will be learned. This may not be what you are seeing.