Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Just A Question About Showdeskfix


  • Please log in to reply
No replies to this topic

#1 MynameisNancy

MynameisNancy

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:10:26 PM

Posted 12 July 2008 - 10:53 AM

Just a question, I'm studying about fighting malware right now, and whenever I have time, I love to look around for fresh HJT log to practice by myself. And today I come across these entries
O4 - HKUS\S-1-5-19\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'Default user')

And I wonder what is ShowDeskFix? As I try to google around and check in many forums. and all I can find is, some experts adviced the user to have HJT fix it, and some forums just ignore it. But no information about it what so ever??? I check them with http://www.hijackthis.de and here is the result;

O4 - HKUS\S-1-5-19\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'LOCAL SERVICE') Unknown application.

O4 - HKUS\S-1-5-20\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'NETWORK SERVICE') Unknown application.

O4 - HKUS\S-1-5-18\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'SYSTEM') Unknown application.

O4 - HKUS\.DEFAULT\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'Default user') Nasty (2.99 / 5.00)


Still, confuse, what is it? And should it be fixed by HJT or should it be left alone?
PS. Is it a right place to ask, if not then I apologize.

Thank you,
Nancy

Edited by MynameisNancy, 12 July 2008 - 10:54 AM.


BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users