ereg32.exe

[Joy]

After a recent hard drive formatting and reinstalling my programs, the last
couple of days I'm getting some sort of message about Program Change
ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving me 3
choices: Keep Settings Delete Settings Block Program
The last one being if I don't know what to do, so I've been choosing that
one for now. But each time I turn on the computer I get the message again.
I googled the ereg32.exe, but the only definitive answer I got was one where
someone had it on the E drive (someone's CD rom, I think) and they were told
to delete , and since my D is my CD rom, I'm wondering if that's the advice
I should take.

 

[Pegasus \(MVP\)]

After a recent hard drive formatting and reinstalling my programs, the
last couple of days I'm getting some sort of message about Program Change
ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving me
3 choices: Keep Settings Delete Settings Block Program
The last one being if I don't know what to do, so I've been choosing that
one for now. But each time I turn on the computer I get the message
again. I googled the ereg32.exe, but the only definitive answer I got was
one where someone had it on the E drive (someone's CD rom, I think) and
they were told to delete , and since my D is my CD rom, I'm wondering if
that's the advice I should take.

This sounds like malware to me. Run msconfig.exe, then locate ereg32.exe
under the Startup tab and remove the tick in front of it.

 

[John McGaw]

After a recent hard drive formatting and reinstalling my programs, the last
couple of days I'm getting some sort of message about Program Change
ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving me 3
choices: Keep Settings Delete Settings Block Program
The last one being if I don't know what to do, so I've been choosing that
one for now. But each time I turn on the computer I get the message again.
I googled the ereg32.exe, but the only definitive answer I got was one where
someone had it on the E drive (someone's CD rom, I think) and they were told
to delete , and since my D is my CD rom, I'm wondering if that's the advice
I should take.

Take a look at this

http://www.spywaredata.com/spyware/malware/ereg32.exe.php

and see if anything clicks in your memory about programs you have installed
which may have an online registration function.

John McGaw
http://johnmcgaw.com

 

[PA Bear [MS MVP]]

What CD is in your D: drive bay?

cf. http://www.f-secure.com/v-descs/marburg.shtml

 

[Joy]

Actually several - all Broderbund greeting card programs. That chart says
Safe, so what should I do about that window that opens every time I start up
the computer? Choose the Keep Settings?

 

[Joy]

No CDs in it; I take them out after I install programs.

 

[Joy]

Should I do this, in light of the URL that John said to look at? (And my
reply.)

 

[John McGaw]

Actually several - all Broderbund greeting card programs. That chart says
Safe, so what should I do about that window that opens every time I start up
the computer? Choose the Keep Settings?

Personally, I'd figure out why the system is trying to run ereg32.exe in
the first place, stop it from happening, and then I'd uninstall it. I use
an application called Startup Control Panel
http://www.mlin.net/StartupCPL.shtml which gives very precise information
about what programs are being started with the system and why. There are
other programs that do similar things but this is the one I'm used to. As
for getting rid of the program, if you are not comfortable with going your
own way I'd suggest contacting Broderbund for help with eliminating their
nagware. I don't know anything about how to root it out so I won't presume
to give detailed instructions that might lead you to grief.

John McGaw
http://johnmcgaw.com