oleprn.exe and jgs1500.dll any know where thses are being loaded from at startup?

[nukemed]

They are constantly being flagged by several spyware progs and though
they are supposed to be deleted during cleanup by these apss, they
reappear time after time. They are spposed to exist in the sys32
folder, but they don't show there.
The following reg keys are created, and I can't even manuall delete
them.
They're supposed to part of n-case (180 solutions)

KEY_USERS\S-1-5-21-337599005-2798138234-624284828-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\oleprn.exe

n-Case: Autorun settings (jgs1500) (Registry value, nothing done)

HKEY_USERS\S-1-5-21-337599005-2798138234-624284828-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\jgs1500.dll

 

[Rock]

They are constantly being flagged by several spyware progs and though
they are supposed to be deleted during cleanup by these apss, they
reappear time after time. They are spposed to exist in the sys32
folder, but they don't show there.
The following reg keys are created, and I can't even manuall delete
them.
They're supposed to part of n-case (180 solutions)

KEY_USERS\S-1-5-21-337599005-2798138234-624284828-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\oleprn.exe

n-Case: Autorun settings (jgs1500) (Registry value, nothing done)

HKEY_USERS\S-1-5-21-337599005-2798138234-624284828-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\jgs1500.dll

N-Case Removal Instructions and Help
http://www.pchell.com/support/ncase.shtml

 

[nukemed]

N-Case Removal Instructions and Help
http://www.pchell.com/support/ncase.shtml

I went to your link, the only problem is when I start in safe mode, I
don't have the 'run' option to open regedit.
I've seen this fix before, but can't open the reg editor in SM

 

[nukemed]

N-Case Removal Instructions and Help
http://www.pchell.com/support/ncase.shtml

I went to your link, the only problem is when I start in safe mode, I
don't have the 'run' option to open regedit.
I've seen this fix before, but can't open the reg editor in SM

 

[Malke]

I went to your link, the only problem is when I start in safe mode, I
don't have the 'run' option to open regedit.
I've seen this fix before, but can't open the reg editor in SM

Perhaps you logged in with a different account in Safe Mode. In any
case, right-click on an empty area of the Task Bar and left-click on
Properties. Then click on Customize the Start Menu and put a check in
the box to display Run. Apply and OK out.

Malke

 

[nukemed]

Thanks

Perhaps you logged in with a different account in Safe Mode. In any
case, right-click on an empty area of the Task Bar and left-click on
Properties. Then click on Customize the Start Menu and put a check in
the box to display Run. Apply and OK out.

Malke

 

[nukemed]

Ok this is really pissing me off
The oleprn.exe and jgs1500.exe are listed in msconfig
When I uncheck them and reboot, they clone themselves back into
msconfig, I get 2 listings for each, the ones I unchecked and 2 new
checked ones.Tried again, now I have 3 of each in there.
I've used Spybot S&D, Spysweeper, Spyware doctor and Adawre SE and
Registry Mechanic.
I've removed the references from the the keys in the regestry manually
but back they come.
Any ideas?

 

[Rock]

Ok this is really pissing me off
The oleprn.exe and jgs1500.exe are listed in msconfig
When I uncheck them and reboot, they clone themselves back into
msconfig, I get 2 listings for each, the ones I unchecked and 2 new
checked ones.Tried again, now I have 3 of each in there.
I've used Spybot S&D, Spysweeper, Spyware doctor and Adawre SE and
Registry Mechanic.
I've removed the references from the the keys in the regestry manually
but back they come.
Any ideas?

Try running HijackThis and posting the log to one of the specialty
forums, _NOT_ this one.

HijackThis
http://www.majorgeeks.com/download.php?det=3155

Forums to Interpret HijackThis Logs:

http://www.spywareinfo.com/forums/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/