how to check registry entries??

**REMA** · 07-17-2009, 02:35 AM

not sure if this is right place to post ..
Running XP pro 32 bit
I recently had Aware.Vundo Variant/Rel that was detected by SUPERAntiSpyware ..it had been some time since I'd run this...silly me been building my first self-build PC with the help of these forums :-) so got distracted
( I also run Malwarebytes, SpywareBlaster and Mcafee Anti-virus. I have Microsoft Internet Explorer 8 set to ask if we want to use Active X controls which I allow on known sites...also it asks if I want to D/L cookies....it's amazing how many cookies you block and the sites still work.

SuperAntiSpyware seems to have cleared things up. I had no sign of this except that the PC was very slow on shutting down and saving settings...the Hard disk is bloated though of 229 GB being available only 32.2 GB is free so I need to burn then deletre some game patches etc etc

Whilst in regedit I saw this entry at
HKEY_LOCAL_MACHINE SOFTWARE Microsoftindows (note no "w" as in windows
CurrntVersion Exorer Browser Hlper Objects then a Hex number string

This may be a legitimate entry..I search microsoft site but found nothing.
Also is there a good tool for SAFELY (as possible anyway) to clean the registry as I note there are entries there for games and programmes we deleted long ago OR is it best to leave well alone.

Thanks for any advice :-)
have a good weekend

**lorjack** · 07-17-2009, 09:58 PM

Safely? Probably not, as a small mistake can tank the system but you can prevent that easily. Always make a backup of the registry before you modify it. I like to use CCleaner to clean up the registry, i have never had it screw anything up before.

However, you should verify that the system is clean first. Go here and start the process of cleaning out your system.
NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

**REMA** · 07-19-2009, 02:10 AM

Hello can I just check one thing....Do you suspect that the above registry entry is suspicious ? I just find it odd when there is an entry very similar to the correct entry...but on the other hand if I was writing a trojan or virus etc...I would probably name it something totally unrelated to help to avoid detection. Note Malwarebytes, SpywareBlaster and Mcafee Anti-virus are not reporting anything.

I have tried to run the GMER programme twice but it fails after sveral hours and the mouse freezes so I have to manually turn off the PC. The McAfee pop-up appears saying that my PC is not protected although I have turned OFF McAfee virus and firewall.
My other PC has been connected to the internet via the Modem and router but I pull the firewire (CAT5) cable from the back of the PC so that this PC is not connected.

What am I doing wrong?
thanks again

**lorjack** · 07-22-2009, 05:16 PM

Yes it does look suspicious

07-17-2009, 02:35 AM	#1 (permalink)
REMA And the TSF helped me! Join Date: Mar 2006 Location: Sweden Sverige Posts: 195 OS: xp32 bit	how to check registry entries?? not sure if this is right place to post .. Running XP pro 32 bit I recently had Aware.Vundo Variant/Rel that was detected by SUPERAntiSpyware ..it had been some time since I'd run this...silly me been building my first self-build PC with the help of these forums :-) so got distracted ( I also run Malwarebytes, SpywareBlaster and Mcafee Anti-virus. I have Microsoft Internet Explorer 8 set to ask if we want to use Active X controls which I allow on known sites...also it asks if I want to D/L cookies....it's amazing how many cookies you block and the sites still work. SuperAntiSpyware seems to have cleared things up. I had no sign of this except that the PC was very slow on shutting down and saving settings...the Hard disk is bloated though of 229 GB being available only 32.2 GB is free so I need to burn then deletre some game patches etc etc Whilst in regedit I saw this entry at HKEY_LOCAL_MACHINE SOFTWARE Microsoftindows (note no "w" as in windows CurrntVersion Exorer Browser Hlper Objects then a Hex number string This may be a legitimate entry..I search microsoft site but found nothing. Also is there a good tool for SAFELY (as possible anyway) to clean the registry as I note there are entries there for games and programmes we deleted long ago OR is it best to leave well alone. Thanks for any advice :-) have a good weekend

07-17-2009, 09:58 PM	#2 (permalink)
lorjack TSF Enthusiast Join Date: Nov 2007 Location: Planet Earth Posts: 2,209 OS: Windows 2K, XP Pro sp3, Windows Vista, Windows 7, Ubuntu	Re: how to check registry entries?? Safely? Probably not, as a small mistake can tank the system but you can prevent that easily. Always make a backup of the registry before you modify it. I like to use CCleaner to clean up the registry, i have never had it screw anything up before. However, you should verify that the system is clean first. Go here and start the process of cleaning out your system. NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help __________________ Those who can't write, write manuals. Don't trouble trouble until trouble troubles you...

07-19-2009, 02:10 AM	#3 (permalink)
REMA And the TSF helped me! Join Date: Mar 2006 Location: Sweden Sverige Posts: 195 OS: xp32 bit	Re: how to check registry entries?? Hello can I just check one thing....Do you suspect that the above registry entry is suspicious ? I just find it odd when there is an entry very similar to the correct entry...but on the other hand if I was writing a trojan or virus etc...I would probably name it something totally unrelated to help to avoid detection. Note Malwarebytes, SpywareBlaster and Mcafee Anti-virus are not reporting anything. I have tried to run the GMER programme twice but it fails after sveral hours and the mouse freezes so I have to manually turn off the PC. The McAfee pop-up appears saying that my PC is not protected although I have turned OFF McAfee virus and firewall. My other PC has been connected to the internet via the Modem and router but I pull the firewire (CAT5) cable from the back of the PC so that this PC is not connected. What am I doing wrong? thanks again

07-22-2009, 05:16 PM	#4 (permalink)
lorjack TSF Enthusiast Join Date: Nov 2007 Location: Planet Earth Posts: 2,209 OS: Windows 2K, XP Pro sp3, Windows Vista, Windows 7, Ubuntu	Re: how to check registry entries?? Yes it does look suspicious __________________ Those who can't write, write manuals. Don't trouble trouble until trouble troubles you...