Re: some ? in windows register
- From: giordi <giordi@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Sun, 3 Dec 2006 10:57:00 -0800
The three people you cited are always my self (!)
It is time that I am searching a solution..
What about the other question? (i.e. c?\..)
"Wesley Vogel" wrote:
Then you probably do not have the malware that creates that key..
At least three people have had it.
http://www.google.com/search?hl=en&lr=&as_qdr=all&q=+%22crfyNpnoo.dat%22&btnG=Search
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In news:uLaVExnFHHA.1816@xxxxxxxxxxxxxxxxxxxx,
NewScience <newscience83@xxxxxxxxxxxxxx> hunted and pecked:
And I've checked all our systems here and cannot find:
HKLM\software\microsoft\user media\tool user
in the registry on any of them.
"Wesley Vogel" <123WVogel955@xxxxxxxxxxx> wrote in message
news:OOg29mmFHHA.5000@xxxxxxxxxxxxxxxxxxxxxxx
c:\windows\tasks is where .job files are located. .Job files are Windows
Task Scheduler Task Objects. .Job files are created when you use the
Task Schedule to Schedule something.
c:\windows\tasks is where you can find Add Scheduled Task.
c:\windows\tasks is where malware sometimes likes to hide.
c:\windows\tasks\ipfqykg\crfyNpnoo.dat is probably related to some kind
of malware.
wowexec.exe is used in conjunction with ntvdm.exe to run old MS-DOS
16-bit applications. ntvdm.exe is NTVirtualDOSMahine. NT is New
Technology. Windows XP is really windows NT 5.1.
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In news:A2EE8782-9AD9-4C35-B674-581A026864C6@xxxxxxxxxxxxx,
giordi <giordi@xxxxxxxxxxxxxxxxxxxxxxxxx> hunted and pecked:
Ciao,
in my winXP sp2 register, I have found some commands with a "?" after
the disk letter "c", as for example:
c?\windows\microsoft.net\framework\v2.0.50727\Microsfot.Common.tasks .
In other word "?" replaces ":" .
Is there a possible reason or maybe I should correct all of them?
Let you observe in addition that to solve (I hope) a strange problem
(ntvdm.exe started after adsl connection occupying the whole cpu), I
found
and removed in HKLM\software\microsoft\user media\tool user, the comand
c:\windows\tasks\ipfqykg\crfyNpnoo.dat (I checked that this occurred
each time before ntvdm.exe). I do not know if there is some
correlation, but I suspect some problem with microsoft.net or asp.net.
I have not found any virus or malware.. Thank you in advance for your
help.
- Follow-Ups:
- Re: some ? in windows register
- From: Wesley Vogel
- Re: some ? in windows register
- References:
- Re: some ? in windows register
- From: Wesley Vogel
- Re: some ? in windows register
- From: NewScience
- Re: some ? in windows register
- From: Wesley Vogel
- Re: some ? in windows register
- Prev by Date: Windows Media Player
- Next by Date: Re: some ? in windows register
- Previous by thread: Re: some ? in windows register
- Next by thread: Re: some ? in windows register
- Index(es):
Relevant Pages
|