Registry entry that won't go away 2

[GrnEyedLdy]

I keep deleting it and it comes right back.


It is under, HKEY|LocalMachine|Software|Microsoft|Windows|Current Version|Run

Value Name
19131B1D1D1B171F1

Value Data
E9E3EBEDEDEBE7E.exe

Does anyone know what this is?

Any help greatly appreciated.

Thanks,

Patty

 

[GrnEyedLdy]

Also, along with it is this one...

Value Name
whxhwsyA

Value Data
C:\WINDOWS\whxhwsyA.exe

Help....

 

[linney]

See if you can knockout what is recreating the entry.

Removing adware & spyware
faq608-4650

Microsoft (GIANT Antispyware) Beta available
Thread779-979113

Try the free version of "Ewido"

http://www.ewido.net/

 

[hidden75]

Spyware... Forsure. It will go away but it recreates itself if you don't kill it in processes first. Also you can temporarly change the permissions on the run key so no program can write to it. in both HKML and HKU.


Install spybot S&S and immunize your system. I find it helps alot.

 

[NARSBARS]

Don't forget to kill off your temp files before rebooting.
run %temp% and delete all.

NARSBARS

 

[GrnEyedLdy]

Thanks for all the replies! You all are the greatest.

Hidden75, you were right, I had neglected to kill the process. All is well now. Thanks so much!

Patty

 

[alidabiri]

just curious,
in case it happens to me. how do you kill a process?

 

[electronicsfreak]

Hit crtl alt delete, then click task manager, now click the processes tab. Find the process on there you want to kill, click on it then click end process.