files within Windows 2000

[jodygirl]

I've been hijacked.
Not sure about the following:
O4 - HKLM\..\Run: [hcx] C:\WINNT\hcx.exe
O4 - HKLM\..\Run: [alcb] C:\WINNT\alcb.exe
O4 - HKLM\..\Run: [nqranor] C:\WINNT\nqranor.exe

Are these ligitament files?

 

[Dave Patrick]

Not a chance. Get rid of them.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


:
| I've been hijacked.
| Not sure about the following:
| O4 - HKLM\..\Run: [hcx] C:\WINNT\hcx.exe
| O4 - HKLM\..\Run: [alcb] C:\WINNT\alcb.exe
| O4 - HKLM\..\Run: [nqranor] C:\WINNT\nqranor.exe
|
| Are these ligitament files?

 

[George Hester]

The fewer things you have in the Run key of HKLM the better. Try to keep those minimized. The only one that I know of that is necessary there is:

Well probably none. I have regsvr32 /s mqrt.dll (Microsoft Message Queue) and a Sun Java schedule. That's it. Check in Run key of HKCU as well. Keep those to a minimum also.