Windows Forum·65,706 discussions

Registry Problem

Locked

Hey there all, I have had a problem with a key in my registry that wont seem to fix. The problem lies in:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\c6rncf1.exe

C:\WINDOWS\System32\c6rncf1.exe /k

I have tried deleting the file manually but I know that deleting keys in HLM doesnt work. I have also tried variable software registry programs such as norton utilities and registry mechanic. Please could anyone help me with this problem,

Cheers – Simon

Topic

Reply To: Registry Problem

In reply to Registry Problem

I am not sure, Simon, but somewhere in the back of my memory the word Virus is ticking away.

I reckon the virus writes this file and the registry entry to load itself next boot up, and even if you delete it, it will be put back there at shut down.

I could be horribly wrong and I can’t recall the particular offender, but I would start looking at that or spyware, or a trojan.

Have you scanned the system with either Spybot or Ad-aware? That might show something.

Hope this helps a bit, and sorry I can’t pull more info to mind.

If I wake up at 2:00 am with the information going around in my head, I will post it here.

cheers,

Alan.

Reply To: Registry Problem

In reply to Reply To: Registry Problem

Poster rated this answer.

Reply To: Registry Problem

In reply to Registry Problem

Hey Alan, thanks for your reply, well I have tried using Ad-Aware SE and it doesn’t pick it up. I also have Zonelabs Anit-Virus but that doesn’t pick it up either! Although it doesn’t seem to be effecting my computer, an annoying little window keeps popping up saying the error. The only way I could think of getting rid of it is by formatting the hard drive (probably an extreme idea but may be the only option!)

Cheers – Simon

Reply To: Registry Problem

In reply to Registry Problem

Examine file properties to get a clue of other names. If you are sure it is not legit, then search registry for other entries with the same name.

Reply To: Registry Problem

In reply to Reply To: Registry Problem

IN addition you may want to try downloading Process Explorer, mentioned here at PCWorld for free.
http://www.pcworld.com/downloads/file_description/0,fid,23780,00.asp

It will tell you more about the process, including what app launched it.

Reply To: Registry Problem

In reply to Reply To: Registry Problem

Poster rated this answer.

Reply To: Registry Problem

In reply to Registry Problem

sounds like ‘virus’. ZoneAlarm is great but you may want to try AVG from Grisoft. (www.Grisoft.com) totally free and updated regularly. Once you fix the problem with whatever works, use ‘System Mechanic’s’ registry backup utility to be able to restore your system to a stable state. Also, ZoneAlarm and other virus fighting utilities post a ‘files list’ that viruses add to your Operating system. Very helpful should you have to remove them manually.
Good luck..H

Reply To: Registry Problem

In reply to Reply To: Registry Problem

Poster rated this answer.

Reply To: Registry Problem

In reply to Registry Problem

Try Spybot Search and Destroy, alongside Adaware, (there’s a second edition out now). Make a note of the registry entries that Spybot discovers, do a ‘fix problem’ then re-boot in Safe Mode. Do a Regedit, (save the existing registry to somewhere you can find it easily) and manually delete those keys.
Then re-boot normally. Run Spybot and Adaware again. That SHOULD resolve the problem.

Reply To: Registry Problem

In reply to Reply To: Registry Problem

Poster rated this answer.

Reply To: Registry Problem

In reply to Registry Problem

Go to housecall.trendmicro.com. There online scan is probably the most up-to-date and complete solution when it comes to malware, spyware, virus, etc.

Reply To: Registry Problem

In reply to Reply To: Registry Problem

Poster rated this answer.

Reply To: Registry Problem

In reply to Registry Problem

Without costing you a cent:

I used a lot of spyware and virus tools. Here are some online virus scans (never hurts, especially when you do not need to install anything):
http://www.bitdefender.com/scan/licence.php
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
http://security.symantec.com/sscv6/home.asp?langid=ie&venid=sym&plfid=23&pkj=QQWRORVWHFHMFNZMBBX
http://housecall.antivirus.com/housecall/start_corp.asp

Also the spyware programs I use are, of course, Spybot

Home

Adaware
http://www.lavasoftusa.com

I also found some new places for spyware stuff at:

Alternative ways to get cash to cover an emergency

Hope this helps.

Reply To: Registry Problem

In reply to Reply To: Registry Problem

Poster rated this answer.

Reply To: Registry Problem

In reply to Registry Problem

My guess is that the /k switch is running the file as a service so that when you shut down it replaces the entry before stopping. If you have system restore turned on then if you delete the file it is being replaced when you reboot. To completely eradicate, turn off system restore, reboot, clean out your temp internet files and then delete the file and the registry entry.

It might not be a virus but that doesn’t mean it’s not malware. Some programs to find malware (like AdAware and SpyBot) don’t pick up everything. You could get a copy of HiJackThis and run it to determine everything that is starting up and/or attaching to ie and clean it from there.

Cheers.

RW

Reply To: Registry Problem

In reply to Reply To: Registry Problem

Poster rated this answer.

Reply To: Registry Problem

In reply to Registry Problem

Hey there to everyone that helped, I managed to get rid of the entry by booting in safe mode then manually deleting the entry, rebooted normally and it was gone! Thanks to everyone that helped it is much appreciated…

Simon

Reply To: Registry Problem

In reply to Reply To: Registry Problem

Poster rated this answer.

Reply To: Registry Problem

In reply to Registry Problem

This question was closed by the author

[Author]

Replies