Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Auto Startup program wants RunOnce permission...?


  • Please log in to reply
5 replies to this topic

#1 Jarjum

Jarjum

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:05:03 AM

Posted 09 January 2013 - 12:25 PM

Sorry if this is a silly question for most, but it's too much for me to handle.

A WinPatrol new program alert is telling me:

:: A new auto Startup Program has been detected.
:: Type: RunOnce
:: Often required for software updates and new installations.
:: This program will only run once, the next time you restart your computer.
:: Do you approve the addition of this program startup setting?
:: C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_5_502_135_Plugin.exe -up

I've checked the PLUS Info at WinPatrol, but the file comes up unknown, which, they say, could simply mean they have not encountered this question before.

Can anyone here tell me please, if it's safe for me to answer 'yes' to the RunOnce request? Or does this mean I have other issues of concern?

Thank you for your help.
jarjum
PS. I do have Adobe on my XP pro system (+ AVG free, Spybot S&D, MalwareBytes AntiMalware, SpywareBlaster still running happily after many years -- not sure if you need all this or other info?)

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,552 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:03 PM

Posted 09 January 2013 - 01:05 PM

I've never...seen a Windows popup indicating the things that you state are requested.

It doesn't make sense for Windows to request such, IMO. Run Once is a startup command for which the entries do not call for manual input of any sort.

I'm moving your topic to Am I Infected.

Louis

#3 Jarjum

Jarjum
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:05:03 AM

Posted 09 January 2013 - 01:54 PM

Ummm... sorry, but I didn't realize I should put my question in this category, since I don't know yet that it is an infection.

But thank you for your reply, and for correcting me.

On thing though... it's not a Windows pop-up. It's an installed program, called 'WinPatrol PLUS'.

Hope someone here can help me please?

jarjum

PS. Louis, are you OM by any chance?

Edited by Jarjum, 09 January 2013 - 01:59 PM.


#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,562 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:03 PM

Posted 09 January 2013 - 08:16 PM

It looks to me like WP is just doing it's job. It's asking for permission to istall the Macromedia Flash Plugin update ,so that should be ok.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 Jarjum

Jarjum
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:05:03 AM

Posted 09 January 2013 - 09:17 PM

Oh! Thank you so much Boopme. I steeled myself ready for "anything" (not), then went ahead and clicked 'yes' to allow the RunOnce. Nothing happened.

Now how many times would you think someone would be happy to say that? But -- my computer didn't shrivel, the internet, albeit slowly, is still at my fingertips, and I'm wearing a huge smile of relief.

Thanks again and best wishes to you!
jarjums

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,562 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:03 PM

Posted 09 January 2013 - 10:15 PM

Great!1 This can go Spybot S&D. MBAM and SpywareBlaster cover it and better.

Lets check a few things before you go.

Please Download TDSSkiller
Launch it.
Click on change parameters-Select TDLFS file system
Click on "Scan".
Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results.

>>>>

MiniToolBox
Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
>>>

ADW Cleaner

Please download AdwCleaner by Xplode onto your desktop.

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Delete.
  • Confirm each time with Ok.
  • You will be prompted to restart your computer. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users