Re: How to prevent Open File - Security Warning window from displaying

Bevy_Jeter wrote:

After each startup, the Open File - Security Warning window displays which shows: The publisher could not be verified. are you sure you want to run this software name l071.exe. Puclisher: unknown publisher. Type: Application, From: C/windows/system32.

my hkey current user - run:
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AOLCC"="\"C:\\Program Files\\AOL Computer Check-Up\\ACCAgnt.exe\" /startup"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"strtas"="l071.exe"

my hkey local machine - run:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"*abrdll"="C:\\WINDOWS\\Web\\abrdll.exe"
"HostManager"="C:\\Program Files\\Common Files\\AOL\\1116276662\\ee\\AOLSoftware.exe"
"AOLDialer"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"Symantec NetDriver Monitor"="C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe /Consumer"
"TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"strtas"="l071.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"

mu software environment/startup programs:
*abrdll c:\windows\web\abrdll.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ALUAlert c:\program files\symantec\liveupdate\alunotify.exe NT AUTHORITY\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ALUAlert c:\program files\symantec\liveupdate\alunotify.exe .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
AOLCC "c:\program files\aol computer check-up\accagnt.exe" /startup KATIET\Kattie HKU\S-1-5-21-1935655697-2111687655-1060284298-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
AOLDialer c:\program files\common files\aol\acs\aoldial.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HostManager c:\program files\common files\aol\1116276662\ee\aolsoftware.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MSMSGS "c:\program files\messenger\msmsgs.exe" /background KATIET\Kattie HKU\S-1-5-21-1935655697-2111687655-1060284298-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
QuickTime Task "c:\program files\quicktime\qttask.exe" -atboottime All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SunJavaUpdateSched c:\program files\java\jre1.5.0_06\bin\jusched.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Symantec NetDriver Monitor c:\progra~1\symnet~1\sndmon.exe /consumer All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
TkBellExe "c:\program files\common files\real\update_ob\realsched.exe" -osboot All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ccApp "c:\program files\common files\symantec shared\ccapp.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
desktop desktop.ini NT AUTHORITY\SYSTEM Startup
desktop desktop.ini KATIET\Kattie Startup
desktop desktop.ini .DEFAULT Startup
desktop desktop.ini All Users Common Startup
strtas l071.exe KATIET\Kattie HKU\S-1-5-21-1935655697-2111687655-1060284298-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
strtas l071.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


It Looks like the problem is with:
strtas     l071.exe

How do I know if this exe is good or bad?
What do I do about it?


No hits on google so that could be malware. Have you done a thorough scan in safe mode using a combination of AV and anti-spyware programs with updated definitions?

--
Rock
MS MVP  Windows - Shell/User

.