Strange registry entry

[Jazz1944]

I have been having problems with unsolicited popup, "you are the 100,000" etc and was checking the registries to investigate. I found the following in

HKEY_CURRENT_USER

SOFTWARE

 

vƒAƒƒŠƒP??[ƒVƒ‡ƒ“ ƒEƒBƒU??[ƒh‚Å??¶??¬‚³‚ꂽƒ????[ƒJƒ‹ ƒAƒvƒŠƒP??[ƒVƒ‡ƒ“

 

Can anyone enlighten me as to what this is.

 

Thanks.

[Satchfan]

Hello Jazz1944 and welcome to the The Pit.

My name is Satchfan and I would be glad to help you with your computer problem.

Please read the following guidelines which will help to make cleaning your machine easier:

• [*]please follow all instructions in the order posted [*]please continue to review my answers until I tell you your machine appears to be clear.

Absence of symptoms does not mean that everything is clear [*]all logs/reports, etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format, uncheck Word wrap if it is checked [*]if you don't understand something, please don't hesitate to ask for clarification before proceeding [*]the fixes are specific to your problem and should only be used for this issue on this machine. [*]please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested


===================================================

I’m not sure what that is but we’ll find out.

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.

• [*]run AdwCleaner and select

Delete [*]when it has finished it will ask to reboot - allow the reboot [*]on reboot a log will be produced; please attach the content of the log to your next reply.

===================================================

Download and run OTL

• [*]download

OTL to your desktop. [*]double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted. [*]click Scan all users. [*]under Custom Scan paste this in

netsvcs
%SYSTEMDRIVE%*.exe
/md5start
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
services.exe
/md5stop
%systemroot%*. /rp /s
DRIVES
CREATERESTOREPOINT

[*]click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan won’t take long. [*]when the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL. [*]please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. [*]you may need two posts to fit them both in.

===================================================

Run aswMBR

• [*]download

aswMBR.exe to your desktop. [*]double click the aswMBR.exe to run it [*]if asked, accept the AVAST virus definition download [*]click the "Scan" button to start scan [*]on completion of the scan click Save log, save it to your desktop and post in your next reply. Note - do NOT attempt any Fix yet.

Logs to include with next post:

AdwCleaner log
OTL.txt
Extras.txt
aswMBR log

Thanks

Satchfan

 

[Jazz1944]

Hello SATCHFAN, Thank you for our speedy response.

 

I have checked my other PC and found the same entry so one must imagine that it is related to some programme albeit what I don't know.

 

It doesn't seem to affect the operation either of the PCs so I will just leave it for now.

 

I only appear to get the pop ups on the BBC News page, so I guess I will just have to put up with it for now.

 

I have cleaned the cache and the cookies and run adware programmes and put a restriction on Google so unless anyone else has any ideas I will just soldier on.

 

Thank you anyway.

 

David.

[Satchfan]

It's your choice David but I'm happy to look at the logs produced by the scans I suggested.

 

If you want to leave it for now, OK.

 

I'll leave this open for another 24 hours in case you want to run the scans and get me to have a look.

 

Satchfan