F
Frank
System 32 folder opens at start up, how can I stop this
and why is it happening?
and why is it happening?
-----Original Message-----
System 32 folder opens at start up, how can I stop this
and why is it happening?
.
spyware or virus creates the entry
"oclaecrc"="C:\\WINDOWS\\xavxltky.exe"
"nvid"="C:\\WINDOWS\\System32\\oasgzbqj.exe"
"pvsetupd"="C:\\WINDOWS\\System32\\pvsetupd.exe"
See: http://www.pestpatrol.com/PestInfo/h/ht_patch.asp"HTpatch"="C:\\WINDOWS\\htpatch.exe"
"RunDLL"="rundll32.exe \"C:\\WINDOWS\\System32\\bridge.dll\",Load"
"WinFavorites"="c:\\program files\\winfavorites\\WinFavorites.exe1"
"systray"="C:\\WINDOWS\\System32\\a.exe"
Files\\QuickTime\\qttask.exe\" -atboottime""QuickTime Task"="\"C:\\Program
Files\\Real\\Update_OB\\realsched.exe\" -osboot""KAZAA"="C:\\Documents and Settings\\Isabelle\\My Documents\\Other docs\\kazaa.exe /SYSTRAY"
"TkBellExe"="\"C:\\Program Files\\Common
identify whether the values in my HKLM /. . ./Run and HKCU/. . ./Run keysgerontius said:Rick,
I have been following the other discussions about this problem. Can't
Could you do the same for me? Here are the contents, copied as per yourI noticed that you kindly offered to look over the contents of their keys.
Files\\QuickTime\\qttask.exe\" -atboottime"Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HTpatch"="C:\\WINDOWS\\htpatch.exe"
"SoundMan"="SOUNDMAN.EXE"
"NeroCheck"="C:\\WINDOWS\\System32\\\\NeroCheck.exe"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"CARPService"="carpserv.exe"
"QuickTime Task"="\"C:\\Program
Files\\Real\\Update_OB\\realsched.exe\" -osboot""KAZAA"="C:\\Documents and Settings\\Isabelle\\My Documents\\Other docs\\kazaa.exe /SYSTRAY"
"OmniPage"="C:\\Program Files\\Caere\\OmniPagePro90\\opware32.exe"
"TkBellExe"="\"C:\\Program Files\\Common
@=hex(2):63,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,5"RunDLL"="rundll32.exe \"C:\\WINDOWS\\System32\\bridge.dll\",Load"
"WinFavorites"="c:\\program files\\winfavorites\\WinFavorites.exe1"
"oclaecrc"="C:\\WINDOWS\\xavxltky.exe"
"nvid"="C:\\WINDOWS\\System32\\oasgzbqj.exe"
@=hex(2):63,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,00,5c,00,5"systray"="C:\\WINDOWS\\System32\\a.exe"
"pvsetupd"="C:\\WINDOWS\\System32\\pvsetupd.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents\IMAIL][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo"Installed"="1"
mponents\MAPI][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo"Installed"="1"
"NoChange"="1"
mponents\MSFS]
"Installed"="1"
and:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\ctfmon.exe"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NVMCTRAY.DLL,NvTaskbarInit"
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.