Virus stored in the Registry?

Forum Windows 2000/NT : Windows 2000/NT General Discussion - Virus stored in the Registry?

Tom's Hardware: Over 1.4 million members in 6 different countries available to answer all your high-tech questions. Sign up now! Its free!
Word :    Username :           
 

Archived from groups: microsoft.public.windowsnt.registry (More info?)

 

I have been working hard to remove spyware/adware from my system.

I was just looking in the registry and noticed a very odd reg key.

Under HKEY_LOCAL_MACHINE/SOFTWARE, I find a reg keys

28G#C2L3#9QC9E

which is a really odd name considering other keys at this level are named
"Adelphia", "Adobe", "AOL", "Apache", and so on.

Looking into this key, I see a bunch of sub keys with REG_BINARY values
which have equally incomprehensible names and values. For example, key
names like

26QG4JD4GM8X#P
2896QLH5TT65XK

with values that I can't figure out.

I am VERY suspicious of this data and want to remove it. I haven't yet.

Any thoughts?

-- Chris Curzon

Sponsored Links
Register or log in to remove.

Archived from groups: microsoft.public.windowsnt.registry (More info?)

 

Export it before deleting or use one or more of the spyware removal tools.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"Chris Curzon" wrote:
|I have been working hard to remove spyware/adware from my system.
|
| I was just looking in the registry and noticed a very odd reg key.
|
| Under HKEY_LOCAL_MACHINE/SOFTWARE, I find a reg keys
|
| 28G#C2L3#9QC9E
|
| which is a really odd name considering other keys at this level are named
| "Adelphia", "Adobe", "AOL", "Apache", and so on.
|
| Looking into this key, I see a bunch of sub keys with REG_BINARY values
| which have equally incomprehensible names and values. For example, key
| names like
|
| 26QG4JD4GM8X#P
| 2896QLH5TT65XK
|
| with values that I can't figure out.
|
| I am VERY suspicious of this data and want to remove it. I haven't yet.
|
| Any thoughts?
|
| -- Chris Curzon
|
|
|
|
|
|
|

Reply to Anonymous
Tom's Hardware > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > Virus stored in the Registry?
Go to:

There are 545 identified and unidentified users. To see the list of identified users, Click here.

Please mind

You are about to answer a thread that has been inactive for more than 6 months.
If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.

Add a reply Cancel
Sponsored links
  • Ask the community now
  • Publish
Ad
They won a badge
Join us in greeting them