Windows Forum

Ask something
Discussion Locked

Suspicious Registry Entries

0 helpful
6 replies

by luciano991

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

In this registry key:
HKEY_USERS\S-1-5-21-1202660629-507921405-854245398-1004\Software\Microsoft\Search Assistant\ACMru\5603

I have the following entry:
0?FFFF9C

And in the same place I have ]?FFFF9A

The Name of the first is 000 and the second in 001 and the type is REG_SZ.

What are these nasty things.

6 replies

by dmiles

This could be a spyware entry from a site that was visited and placed a cookie on your machine
Delete the registry entries
Check the C:\Windows directory and see if any folders are associated with the name or characters

Also run the anti-virus on your system to make sure you donot have a virus

by joseph moore

I agree, really sounds like some spyware. Check also HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search
to see if there is anything strange there.
Also HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search
and HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Search

Try opening MSCONFIG and see if there is something strange in there that is calling Regedit /S. IF so, remove it from the Startup.

hope this helps

This discussion is closed to new replies.