Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Strange Registry Key


  • Please log in to reply
7 replies to this topic

#1 gnibblit

gnibblit

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:03:47 AM

Posted 27 February 2008 - 12:55 PM

I was taking a look at my registry today, while reviewing some of my professor's research notes. What I came across was an entry in the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
The registry key is ``o)i3
There is no data for the key. Just "Default" Type - "REG_SZ" Data - "Value not set"
I'm just wondering if anyone has seen this before and if it's something to be concerned about. Hijack This doesn't show anything, neither does AVG.
Thanks in advance

BC AdBot (Login to Remove)

 


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,853 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:03:47 AM

Posted 28 February 2008 - 12:52 AM

Hello gnibblit,

What is your operating system: Windows XP, Vista etc.?

What security programs do you have installed?

Have you run them in Safe Mode?

Did they find anything?

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#3 gnibblit

gnibblit
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:03:47 AM

Posted 29 February 2008 - 12:40 AM

Hi Orange Blossom, Thanks for the reply.
I am running Window$ XP Home, I use AVG Free, and AGV Anti-Spyware 7.5. I have not run them in safe mode as yet. I will be doing that as soon as I finish this post, and will let you know what they find, if they find anything.

{EDIT} I ran a complete scan with AVG and AVG Anti-Spyware (After running the updates) and neither found anything to report.

Edited by gnibblit, 29 February 2008 - 08:13 AM.


#4 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,853 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:03:47 AM

Posted 01 March 2008 - 01:51 AM

Hello gnibblit,

Let's run a scan with SUPERAntiSpyware in Safe Mode and see if it comes up with anything. I have found this program will find things that AVG AntiSpyware doesn't, and vice versa.

Download and install SUPERAntiSpyware free found here: SUPERAntiSpyware

Be sure to click on the download button to the left, not on the free trial download on the right.

Install it and double-click the icon on your desktop to run it.
It will ask if you want to update the program definitions, click Yes.
Under Configuration and Preferences, click the Preferences button.
Click the Scanning Control tab.
Under Scanner Options make sure the following are checked:
  • Close browsers before scanning
  • Scan for tracking cookies
  • Terminate memory threats before quarantining.
o Please leave the others unchecked.
o Click the Close button to leave the control center screen.
Reboot into Safe Mode
On the main screen, under Scan for Harmful Software click Scan your computer.
On the left check C:\Fixed Drive.
On the right, under Complete Scan, choose Perform Complete Scan.
Click Next to start the scan. Please be patient while it scans your computer.
After the scan is complete a summary box will appear. Click OK.
Make sure everything in the white box has a check next to it, then click Next.
It will quarantine what it found and if it asks if you want to reboot, click Yes.
Reboot into Normal Mode
To retrieve the removal information for me please do the following:
o After reboot, double-click the SUPERAntispyware icon on your desktop.
o Click Preferences. Click the Statistics/Logs tab.
o Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
o It will open in your default text editor (such as Notepad/Wordpad).
o Please highlight everything in the notepad, then right-click and choose copy.
Click close and close again to exit the program.

Please post the log in your next reply.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#5 gnibblit

gnibblit
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:03:47 AM

Posted 11 March 2008 - 05:43 PM

Thanks Orange Blossom;
Sorry for the late reply. I will post back as soon as the scan is complete.

#6 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,853 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:03:47 AM

Posted 19 March 2008 - 03:27 PM

Hello gnibblit,

Have you completed the scan yet?

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#7 gnibblit

gnibblit
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:03:47 AM

Posted 21 March 2008 - 07:22 AM

Yes I did. I'm sorry,
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 03/15/2008 at 08:07 AM

Application Version : 4.0.1154

Core Rules Database Version : 3417
Trace Rules Database Version: 1409

Scan type : Custom Scan
Total Scan Time : 00:02:42

Memory items scanned : 328
Memory threats detected : 0
Registry items scanned : 4508
Registry threats detected : 0
File items scanned : 24920
File threats detected : 0

#8 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:03:47 AM

Posted 21 March 2008 - 03:25 PM

I'd suggest exporting the key to a convenient location (such as your Desktop), then deleting it. Reboot and see what happens.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users