PDA

View Full Version : Mystery start up file



mzee
30-09-2016, 08:31 AM
Windows 7 Pro 32bit has a start up file which when disabled does not seem to make any difference, see below:

HKLM:RunOnce 4FA12186-8089-4137-B5DF-B472F6A69F8B

Any ideas as to what it does?

Lawrence
30-09-2016, 09:12 AM
Have you done the usual Antivirus/Malware scans as the last part of the reg entry B5DF-B472F6A69F8B shows up here

http://www.bleepingcomputer.com/forums/t/450198/infected-with-w32fakealert/

bevy121
30-09-2016, 12:43 PM
Did you paste or type that HKLM Reg entry?

Are you sure the 8089 in the second digit sequence is not actually 8D89

4FA12186-8D89-4137-B5DF-B472F6A69F8B