HKUS ... CTFMON.EXE entries

weeGeordie · 15-Nov-2009, 12:24 PM #1

I'm looking through an HJT log and I came across these two entries that look a little different than the regular ctfmon.exe that I found, (I confirmed it is the Office XP entry).

They are:

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

Does anyone know if they are OK? I have been checking in systemlookup.com but I see no refernece to HKUS enties.

Thanks

**Cookiegal** · 15-Nov-2009, 02:15 PM #2

Yes, they are fine.

weeGeordie · 15-Nov-2009, 02:21 PM #3

Thank you

**Cookiegal** · 15-Nov-2009, 02:36 PM #4

You're welcome.

Tag Cloud
access acer asus bios bsod computer crash desktop driver drivers error ethernet excel freeze gaming hard drive hardware hdmi internet laptop malware memory modem monitor motherboard network printer problem ram registry router security slow software sound toshiba trojan ubuntu 11.10 uninstall usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Search
Search for:

Find the solution to yourcomputer problem!

Find the solution to your
computer problem!