info
Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
Re: Registry - this can't be good
5 views
Skip to first unread message
Shadow
Sep 20, 2020, 5:51:57 PM9/20/20
to
On Sun, 20 Sep 2020 17:31:33 +0200, "s|b" <m...@privacy.invalid> wrote:
>So I'm visiting my sister and as usual I take a look at her PC (Windows
>10, all recent updates), mostly to update old software. Her C: drive was
>all clogged up, a folder (Software) that I use has miraculously
>vanished, Fortnite was installed, ... At his point, I'm happy Chrome
>isn't installed (again).
>
>Then I look at the Registry and I see this:
><https://i.postimg.cc/W3TGJbdK/regedit.png>
The
hOhOhOhOhOhOhOhOhOhOhOhOhOhOhO
Sounds suspicious.
A Chinese Santa Claus?
;)
Seriously, try to put that as a filter in Regmon(or whatever
it's called now) and try to see what program is summoning it.
Cross posted to other relevant groups.
[]'s
>
>That can't be good, right? Avast can't find anything. CCleaner doesn't
>show me these files and SUPERAntiSpyware and Malwarebytes don't raise an
>alarm either.
>
>What could this be? The most recent backup image (Macrium) is dated
>2018, but I'm inclined to use it to get rid of this crap... unless
>anyone else has a better idea?
--
Don't be evil - Google 2004
We have a new policy - Google 2012
>So I'm visiting my sister and as usual I take a look at her PC (Windows
>10, all recent updates), mostly to update old software. Her C: drive was
>all clogged up, a folder (Software) that I use has miraculously
>vanished, Fortnite was installed, ... At his point, I'm happy Chrome
>isn't installed (again).
>
>Then I look at the Registry and I see this:
><https://i.postimg.cc/W3TGJbdK/regedit.png>
The
hOhOhOhOhOhOhOhOhOhOhOhOhOhOhO
Sounds suspicious.
A Chinese Santa Claus?
;)
Seriously, try to put that as a filter in Regmon(or whatever
it's called now) and try to see what program is summoning it.
Cross posted to other relevant groups.
[]'s
>
>That can't be good, right? Avast can't find anything. CCleaner doesn't
>show me these files and SUPERAntiSpyware and Malwarebytes don't raise an
>alarm either.
>
>What could this be? The most recent backup image (Macrium) is dated
>2018, but I'm inclined to use it to get rid of this crap... unless
>anyone else has a better idea?
--
Don't be evil - Google 2004
We have a new policy - Google 2012
0 new messages