Results 1 to 4 of 4
  1. #1
    Star Lounger
    Join Date
    Mar 2002
    Location
    Coin, Andalucia, Spain
    Posts
    58
    Thanks
    0
    Thanked 0 Times in 0 Posts

    unauthorised registry changes on boot up (Win XP -

    I have Ad-Watch monitoring installed which alerts me to any attempt to change registry settings. It has suddenly started alerting me to attempts to make changes on boot up. I recently installed Win XP SP2 and also Omnipage 14 so the requests may be left over from temp files that have not been cleaned up, a corrupted install or something. Here is a typical example:

    Key: Software/Microsoft/Windows/CurrentVersion/RunOnce
    Value: OE-WMPWMP7_Install_0
    Data: CWindowsNFunregmp2.exeMigrateLibrary

    Another Data setting that also comes up is:
    Data: CWindowsSystem32msnnet??(can't read my writing!).dllsystem32"blackbox.dll"

    Any ideas on how I can a) gett rid of these requests and [img]/forums/images/smilies/cool.gif[/img] is it anything more sinister than a corrupted install or whatever?

    TIA

    Richard

  2. Get our unique weekly Newsletter with tips and techniques, how to's and critical updates on Windows 7, Windows 8, Windows XP, Firefox, Internet Explorer, Google, etc. Join our 480,000 subscribers!

    Excel 2013: The Missing Manual

    + Get this BONUS — free!

    Get the most of Excel! Learn about new features, basics of creating a new spreadsheet and using the infamous Ribbon in the first chapter of Excel 2013: The Missing Manual - Subscribe and download Chapter 1 for free!

  3. #2
    Plutonium Lounger Leif's Avatar
    Join Date
    Dec 2000
    Location
    U.K.
    Posts
    14,010
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: unauthorised registry changes on boot up (Win

    They both look like they are connected to Windows Media Player.
    What version do you currently have installed, and have you done a recent upgrade?

  4. #3
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: unauthorised registry changes on boot up (Win XP -

    The RunOnce key is used for programs that [tada!] should run once after a reboot, usually for software that needs to "do something" before much of the operating system starts. Successful running should cause that key to be deleted (so that it only runs once)... Most of the time it's generated by a Microsoft installer.

    John
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

  5. #4
    Star Lounger
    Join Date
    Mar 2002
    Location
    Coin, Andalucia, Spain
    Posts
    58
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: unauthorised registry changes on boot up (Win

    The two files - unregmp2.exe, and "blackbox.dll" - show up on the hard disk in the C:windows$NTServicePackUninstall directory. The first is also in C;windowsinf and the second in C;windowssystem32. Are these leftovers from my recent install of WinXP SP2? I do have win media player V 9.0 if that is any help (and it may have been upgraded through Windows Auto Update).

    Cheers

    Richard

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •