this is nothing you have to worry about.. the value is in your registry because you have opened the file and it's now in your recent file list (the shortcut to this file actually)

Your welcome.. :)

You can keep the file and use it again in a couple of days or so to make sure the keys do not reappear. If the keys cannot be found, the script will tell you by this error:
...

I think you have showing file extensions disabled, so you renamed it to regfix.bat.txt. Make them visible by doing this:

Sorry, for Windows 10 see here:
...

Put this in notepad and save it as regfix.txt. Close notepad.



After this rename regfix.txt to regfix.bat.

Then open this file by rightclicking the file and then choose 'Run as...

Have you deleted the following registry entries and also checked if they come back?

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL...

Maybe the fake certificates installed by this infection are the reason programs can't find it... but I am not sure :)
Just thinking :D

I think the .ini is located in C:\Users\[username]\AppData\Local\Microsoft Toolkit :)

But only delete the folder if there is only one file in this folder (a *.ini file). You could harm your...

Try this and see comments below:


The scheduled task. Its name was "Adobe Acrobat Pro DC Update". You can open the task scheduler writingtaskschd.msc on the start menu search bar and hitting...

by opening them in notepad en look if the content matches the settings.ini I posted above :)
try to look in the C:\Users\Username first

In my case it was an infected copy of Adobe. But this infection can also be hidden in other infected (cracked, illegal) software. The following is the content of my settings.ini file in...

Thank you very much. Now I also know what caused this. An illegal infected copy of Adobe :(