![]() ![]() |
Jul 4 2010, 01:11 AM
Post
#1
|
|
|
Newbie ![]() Group: Members Posts: 2 Joined: 3-July 10 Member No.: 10,751 |
I'm cleaning up a friend's laptop (running Vista) that had a bunch of malware on it. In looking at the registry I came acrose a value C:\Users\Reva\AppData\Local\Temp\mscdexnt.exe in the Run key. I came up with conflicting conclusions in my Google search. Some said Mscdexnt.exe is a CD-ROM "redirector" that enables CD-ROM access from the MS-DOS and is a Microsoft app. Others say it is a variant of the lunii trojan.
What say you? My gut says that since it is located in the Temp directory it's not a MS app. but I would like to make sure. Thanks for your input. Knix the question. I just realized I was in the wrong forum. I'll move the question to the correct one. This post has been edited by ChrisO: Jul 4 2010, 01:47 AM |
|
|
|
![]() ![]() |
|
Lo-Fi Version | Time is now: 10th September 2010 - 06:02 AM |