winuser32.exe

  Newuser1770 13:15 04 May 2004
Locked

winuser32.exe keeps popping up on my PC especially on start up. Does anyone know what it means and how do correct the problem.

  VoG II 13:20 04 May 2004
  VoG II 17:01 04 May 2004

According to your e-mail, you can't open the link. Basically it says that you have the WORM_SPYBOT.JD virus.

"Installation and Autostart Techniques

Upon execution, this memory-resident worm drops a copy of itself using the file name WINUSER32.EXE in the Windows system folder.

It creates the following registry entry so that it executes at every system startup:

HKEY_CURRENT_USER\Software\MicrosoftWindows\CurrentVersion\Run
Windows User Starter = "winuser32.exe"

HKEY_LOCAL_MACHINE\Software\MicrosoftWindows\CurrentVersion\RunServices
Windows User Starter = "winuser32.exe"

HKEY_LOCAL_MACHINE\Software\MicrosoftWindows\CurrentVersion\Run
Windows User Starter = "winuser32.exe"

It also modifies the following registry entry to ensure its execution upon Windows logon:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NTCurrentVersion\Winlogon
Shell = "explorer.exe winuser32.exe"

(Note: The original entry for this registry key is Shell = "explorer.exe" instead of Shell = "explorer.exe winuser32.exe".) "

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Alienware 17 R4 2017 review

Is this the future of VR and AR?

Best iPad buying guide 2017

Comment regarder le Bureau des L├ęgendes en ligne ?