WinXPTalk.com

Ian Hutcheson · Guest

Following removal of all temp files, I got this error
message:

"Could not load or run 'qwerty;' specified in the registry

Find or remove this reference."

HOW DO I FIND THIS REFERENCE AND IS IT SAFE TO REMOVE IT ?

Thanks - please post reply here, or if lengthy, to my e-mail
address below,

- Ian Hutcheson

ianz9y8@hotmail.com

Dave · Guest

FIRST, DON"T YELL!

next, you might just try using regedt32 and doing a search for the offending
term and then figure out what it belongs to and why you deleted it in the
first place. most likely you have an infection and this is just a symptom
of it.

"Ian Hutcheson" <Ian@z9y8.fsnet.co.uk> wrote in message
news:OIBRc257EHA.1188@tk2msftngp13.phx.gbl...

David H. Lipman · Guest

Sounds like you had malware. Search the Registry for "qwerty.exe" and delete the key that
calls it.

NO executable should be loaded from TEMP directory. However malware often does.

You should also do the following...

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt325.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) Update Adaware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point

* * * Please report back your results * * *

--
Dave

"Ian Hutcheson" <Ian@z9y8.fsnet.co.uk> wrote in message
news:OIBRc257EHA.1188@tk2msftngp13.phx.gbl...
| Following removal of all temp files, I got this error
| message:
|
|
|
| "Could not load or run 'qwerty;' specified in the registry
|
| Find or remove this reference."
|
|
|
| HOW DO I FIND THIS REFERENCE AND IS IT SAFE TO REMOVE IT ?
|
| Thanks - please post reply here, or if lengthy, to my e-mail
| address below,
|
| - Ian Hutcheson
|
| ianz9y8@hotmail.com
|
|

	WinXPTalk.com Forum Index -> Security	All times are GMT
Page 1 of 1