Suspicious entries in registry

[Guest]

I just happened to find four entries in registry that caught my eye as
suspicious:

in
HKEY_USERS\S-1-5-21-1234567890123456789<...not acutal number..>

i find 3 weird entries, two of them square boxes (windings) and the third a
jpeg file (exists on my computer)

Under all of them the value UITransitions is turned on (REG_DWORD value
0x00000001) under Preferences

The square boxes also has "Use Hardware Scroll" turned on under Preferences.

The forth suspicious entry following directly under is
"Runtime|LoadImageCheck|858 + with value set to the location of the jpeg file
on harddisk.

Iæve looked up the jpeg and scanned for virus as well as a full scan on the
computer, with none found.

But these are weird entries, aren't they?

Can someone please tell me what UITransitions do in my xp Pro, and why does
the jpeg file appear as an application in the registry?

 

[Wesley Vogel]

This means nothing...
HKEY_USERS\S-1-5-21-1234567890123456789<...not acutal number..>

It's the same as telling us that your street address is 10. What street?
What City? What State? What Country?

We need more information.

Find the same key as
HKEY_USERS\S-1-5-21-1234567890123456789<...not acutal number..>
under
HKEY_CURRENT_USER and post back with that info.

Hint: Right click the key and select Copy Key Name.

Copy Key Name copies the key name to the clipboard. Paste that info in a
message.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In