Strange Registry Key- Possible spyware

Page 1 of 2 12 LastLast

  1. Posts : 19
    Win 10
       #1

    Strange Registry Key- Possible spyware


    I was looking through regedit and was this key

    HKEY_CURRENT_USER\SOFTWARE\·ÎÄà ÀÀ¿ë ÇÁ·Î±×·¥ ¸¶¹ý»ç¿¡¼* »ý¼ºÇÑ ÀÀ¿ë ÇÁ·Î±×·¥

    I believe its some spyware. I need advice on how to deal with it
    Thank you
      My Computer


  2. Posts : 505
    Windows 10 Pro (Mix of Builds) / Linux Mint
       #2

    Scan the system with antispyware / antivirus.

    Report back findings.
      My Computer


  3. Posts : 39,945
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition, Win 11 Pro
       #3

    Recommended malware scanners:

    Malwarebytes (Free version will work well)

    AdwCleaner

    TDSSKiller (To rule out the possibility of rootkits)
    Note   Note

    When running TDSSKiller, launch the program, click on the blue text "Change Parameters" & check the box marked "Detect TDLFS File system." Click OK & then run the scan.
      My Computer


  4. Posts : 19
    Win 10
    Thread Starter
       #4

    RWOne said:
    Scan the system with antispyware / antivirus.

    Report back findings.
    I did a full system scan with malewarebytes and Avast and both found nothing
      My Computer


  5. Posts : 19
    Win 10
    Thread Starter
       #5

    Borg 386 said:
    Recommended malware scanners:

    Malwarebytes (Free version will work well)

    AdwCleaner

    TDSSKiller (To rule out the possibility of rootkits)
    Note   Note

    When running TDSSKiller, launch the program, click on the blue text "Change Parameters" & check the box marked "Detect TDLFS File system." Click OK & then run the scan.
    Malwarebytes and TSDDKILLER found nothing. Doing AdwCleaner right now

    Edit: AdwCleaner found nothing
      My Computer


  6. Posts : 16,325
    W10Prox64
       #6

    Hi.
    That's definitely an odd entry. I am surprised that none of the scans returned anything at all.
    Please try running an ESET Online Scan. You can find detailed instructions in the thread below on how to manipulate it.
    BSOD after boot up, during login or right after, (bad spool header?) Solved - Page 3 - Windows 7 Help Forums

    .
      My Computer


  7. Posts : 16,325
    W10Prox64
       #7

    Has the system been cleaned from infection in the past? Could be a leftover?
    Have you run CCleaner Free on the registry to see if that particular key is flagged as broken?
      My Computer


  8. Posts : 19
    Win 10
    Thread Starter
       #8

    simrick said:
    Hi.
    That's definitely an odd entry. I am surprised that none of the scans returned anything at all.
    Please try running an ESET Online Scan. You can find detailed instructions in the thread below on how to manipulate it.
    BSOD after boot up, during login or right after, (bad spool header?) Solved - Page 3 - Windows 7 Help Forums

    .
    It didn't come up in CCleaner, and i do not believe that this is a leftover infection that was cleaned. (The only infection that avast has picked up are tracking cookies)

    ESET Scanner flagged the following
    C:\$Recycle.Bin\S-1-5-21-550920438-923572385-2769641918-1001\$RZL59UK.exe a variant of Win32/Adware.Coupons.AA application

    Should i go ahead an clean it. Dunno if it'll solve what that registry key is tho.
      My Computer


  9. Posts : 16,325
    W10Prox64
       #9

    jman1505 said:
    It didn't come up in CCleaner, and i do not believe that this is a leftover infection that was cleaned. (The only infection that avast has picked up are tracking cookies)

    ESET Scanner flagged the following
    C:\$Recycle.Bin\S-1-5-21-550920438-923572385-2769641918-1001\$RZL59UK.exe a variant of Win32/Adware.Coupons.AA application

    Should i go ahead an clean it. Dunno if it'll solve what that registry key is tho.
    Hi. Sorry for the delay in responding. Yes, I would go ahead and clean that - it's something to do with coupon printers, which are considered adware/spyware.

    Please see my post #7 above.
      My Computer


  10. Posts : 19
    Win 10
    Thread Starter
       #10

    simrick said:
    Hi. Sorry for the delay in responding. Yes, I would go ahead and clean that - it's something to do with coupon printers, which are considered adware/spyware.

    Please see my post #7 above.
    Cleaned the adware out, but the registry key is still there. I didn't get the exact thing in CCleaner when i scanned the registry, but something similar
    Strange Registry Key- Possible spyware-2016_06_22_01_04_411.png
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 18:11.
Find Us




Windows 10 Forums