Is this an idicator of spyware/malware?

C

Charley

Can anyone tell me what Demarogo Boloweq Xodame is, or why it would appear
in the registry?
 
C

Charley

It appears as follows:

[HKEY_CLASSES_ROOT\CLSID\{937C586A-6E2B-4E69-04A1-1EDB36FFEA1A}]
@="Demarogo Boloweq Xodame"

[HKEY_CLASSES_ROOT\CLSID\{937C586A-6E2B-4E69-04A1-1EDB36FFEA1A}\InprocServer32]
@="C:\\Program Files\\Common Files\\Microsoft Shared\\INK\\INKOBJ.DLL"

[HKEY_CLASSES_ROOT\CLSID\{937C586A-6E2B-4E69-04A1-1EDB36FFEA1A}\ProgID]
@="TpcCom.TabletManager.1"

[HKEY_CLASSES_ROOT\CLSID\{937C586A-6E2B-4E69-04A1-1EDB36FFEA1A}\VersionIndependentProgID]
@="TpcCom.TabletManager"

I realize that it seems to relate to Tablet PC, but I've never heard of it.
 
N

Nick Skrepetos \(SuperAdBlocker.com\)

Charley,

Here is some information on Microsoft's site:
http://msdn.microsoft.com/library/d...tar/gettingstarted/tbconreferencingthesdk.asp

Looks like it's a COM component by where it's registered in the registry and
the fact that it has a Prog ID, etc. and most likely is an ActiveX
component.

Does not appear to be anything you need to worry about.

Nick Skrepetos
SuperAdBlocker.com
http://www.superadblocker.com

Charley said:
It appears as follows:

[HKEY_CLASSES_ROOT\CLSID\{937C586A-6E2B-4E69-04A1-1EDB36FFEA1A}]
@="Demarogo Boloweq Xodame"

[HKEY_CLASSES_ROOT\CLSID\{937C586A-6E2B-4E69-04A1-1EDB36FFEA1A}\InprocServer
32]
@="C:\\Program Files\\Common Files\\Microsoft Shared\\INK\\INKOBJ.DLL"

[HKEY_CLASSES_ROOT\CLSID\{937C586A-6E2B-4E69-04A1-1EDB36FFEA1A}\ProgID]
@="TpcCom.TabletManager.1"

[HKEY_CLASSES_ROOT\CLSID\{937C586A-6E2B-4E69-04A1-1EDB36FFEA1A}\VersionIndep
endentProgID]
@="TpcCom.TabletManager"

I realize that it seems to relate to Tablet PC, but I've never heard of it.

Nick Skrepetos (SuperAdBlocker.com) said:
Hello,

Under what key does this appear? Is it a key or a value?

Nick Skrepetos
SuperAdBlocker.com | SUPERAntiSpyware
http://www.superadblocker.com
 
C

Charley

I tried to post my previous reply with the contents of the registry key at
the top of the message, but it was undeliverable:

(This message has been processed by Symantec AntiVirus. message.scr was
infected with the malicious virus W32.FunLove.4099 and has been deleted
because the file cannot be cleaned.)

However, when I placed the same information at the bottom (bottom-post), it
went through just fine.

Should I be worried?


Nick Skrepetos (SuperAdBlocker.com) said:
Charley,

Here is some information on Microsoft's site:
http://msdn.microsoft.com/library/d...tar/gettingstarted/tbconreferencingthesdk.asp

Looks like it's a COM component by where it's registered in the registry
and
the fact that it has a Prog ID, etc. and most likely is an ActiveX
component.

Does not appear to be anything you need to worry about.

Nick Skrepetos
SuperAdBlocker.com
http://www.superadblocker.com

Charley said:
It appears as follows:

[HKEY_CLASSES_ROOT\CLSID\{937C586A-6E2B-4E69-04A1-1EDB36FFEA1A}]
@="Demarogo Boloweq Xodame"

[HKEY_CLASSES_ROOT\CLSID\{937C586A-6E2B-4E69-04A1-1EDB36FFEA1A}\InprocServer
32]
@="C:\\Program Files\\Common Files\\Microsoft Shared\\INK\\INKOBJ.DLL"

[HKEY_CLASSES_ROOT\CLSID\{937C586A-6E2B-4E69-04A1-1EDB36FFEA1A}\ProgID]
@="TpcCom.TabletManager.1"

[HKEY_CLASSES_ROOT\CLSID\{937C586A-6E2B-4E69-04A1-1EDB36FFEA1A}\VersionIndep
endentProgID]
@="TpcCom.TabletManager"

I realize that it seems to relate to Tablet PC, but I've never heard of it.

Nick Skrepetos (SuperAdBlocker.com) said:
Hello,

Under what key does this appear? Is it a key or a value?

Nick Skrepetos
SuperAdBlocker.com | SUPERAntiSpyware
http://www.superadblocker.com

Can anyone tell me what Demarogo Boloweq Xodame is, or why it would
appear
in the registry?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top