weird entry in hijackthis log

[mikeyb]

morning fellow TDS'ers

has anyone ever heard of this entry in hijackthis

O4 - HKLM\..\Run: [VGARUN] REGVGA.EXE

googled and checked on various sites nothing is coming up? google is finding nothing!! any ideas.

MikeyB

[Jooske]

Hello MikeyB, welcome!
not sure yet, did you try on www.kaspersky.com/remoteviruschk.html to check the file online, in a few seconds you have a possible answer.
What does TDS say when checking the file?
Did you post the HJT log in the HJT forum already to have it checked by the experts?

[mikeyb]

sorry no not yet, new to TDS only got my full paid copy last week! only my second posting :) i will find the thread and post my question there.

Thanks

MikeyB

[Jooske]

You might like to register as a member to this forum too and see your post counter growing :)

http://www.wilderssecurity.com/showthread.php?t=15913
See here some instructions on how to handle with hijackthis logs and where to get the latest hjt program to make it with before posting it.

You can of course post the HJT log here, but they are sooner noticed in the central place by the experts to look deep into them for you.

[Gavin - DiamondCS]

Sorry for not being first to reply :) please send this EXE to me, submit@diamondcs.com.au - it does indeed look suspicious

[Tassie_Devils]

Plus nothing at Kasperskys

Not found

Phrase to find: "REGVGA.EXE"
Found: 0

[TheQuest]

Hi,

Sounds like it might have something to a Monitor or Graphics.

TheQuest 8)

[Jooske]

Zip a copy and please submit to Gavin like asked, and the hjt log posted or if you prefer (Gavin does :) ) the AutoStartViewer log with everything checked to see if there is more the matter (get that one on the www.diamondcs.com products page - free tools)