1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Register.exe

Discussion in 'Virus & Other Malware Removal' started by Attacante, Aug 5, 2002.

Thread Status:
Not open for further replies.
Advertisement
  1. Attacante

    Attacante Thread Starter

    Joined:
    Aug 5, 2002
    Messages:
    4
    Hello to everybody!

    I have a little problem: ZoneAlarm always gives me an alert when i start my computer: "Do you want to REGISTER to access the internet?" Application: Register.exe

    Can anyone help me what program this is and what it does?

    Thank you very much an please except my terrible english! :)
     
  2. wedor

    wedor

    Joined:
    Nov 7, 1999
    Messages:
    4,504
  3. Attacante

    Attacante Thread Starter

    Joined:
    Aug 5, 2002
    Messages:
    4
    OK thank you very much, i will do this immediately!

    :)
     
  4. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
    If this application wants to phone out on startup, it will very probably be in your Startup programs:

    Go to Start/run, and type Msinfo32, followed by OK.
    Go to Software Environment/Startup Programs.
    Click Edit/'Select all', and then 'copy'
    Now paste the contents in your post.
     
  5. Attacante

    Attacante Thread Starter

    Joined:
    Aug 5, 2002
    Messages:
    4
    HI!

    First of all thank you for your tips! :)

    I've checked for viruses, but wether norton or housecall-antivir have found anything!

    Here are my "startup-programs"! I hope you can help me and also hope you can understand me! :)

    Thank you very much!



    ATI Launchpad "c:\programme\ati multimedia\main\launchpd.exe" WUZI\Attacante HKU\S-1-5-21-507921405-562591055-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    AtiPTA atiptaxx.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    CTFMON.EXE c:\windows\system32\ctfmon.exe NT-AUTORITÄT\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    CTFMON.EXE c:\windows\system32\ctfmon.exe NT-AUTORITÄT\LOKALER DIENST HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    CTFMON.EXE c:\windows\system32\ctfmon.exe NT-AUTORITÄT\NETZWERKDIENST HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    CTFMON.EXE c:\windows\system32\ctfmon.exe WUZI\Attacante HKU\S-1-5-21-507921405-562591055-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    CTFMON.EXE c:\windows\system32\ctfmon.exe .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    desktop desktop.ini NT-AUTORITÄT\SYSTEM Start
    desktop desktop.ini WUZI\Attacante Start
    desktop desktop.ini .DEFAULT Start
    desktop desktop.ini All Users Allgemeiner Start
    Dexxa Wireless Keyboard c:\progra~1\dexxa\wirele~1\hotkeyex.exe All Users Allgemeiner Start
    HydarVisionDesktopManager All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    Microsoft Office c:\progra~1\micros~2\office\osa9.exe -b -l All Users Allgemeiner Start
    MSMSGS "c:\programme\messenger\msmsgs.exe" /background WUZI\Attacante HKU\S-1-5-21-507921405-562591055-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    NAV Agent c:\progra~1\norton~1\navapw32.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    NeroCheck c:\windows\system32\nerocheck.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    NewsUpd c:\programme\creative\news\newsupd.exe /q All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    Register MediaRing Talk c:\programme\mediaring talk\register.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    SoundMan soundman.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    WinampAgent "c:\programme\winamp\winampa.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    ZoneAlarm c:\progra~1\zoneal~1\zoneal~1.exe All Users Allgemeiner Start
     
  6. Attacante

    Attacante Thread Starter

    Joined:
    Aug 5, 2002
    Messages:
    4
    Ohhhh ... is it possible that i have found the program? There is one. It's called "Media Talk register.exe".

    Is it sure, that this is the program which wants to go online? And if it is it, why does it want to go online?

    Thank you all! :)
     
  7. HKEd

    HKEd

    Joined:
    Jul 18, 2000
    Messages:
    221
    Hi Attacante...do you have Media Ring installed?

    From another site:
    So...find the file, right-click on it and select Properties. Does it show the manufacturer? If it is Media Ring and you don't use it, just uninstall it. If you want to keep it, but don't want it activated until you want it, uncheck the startup in msconfig (what OS do you have?).
     
  8. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
    Ed's right: the line's right there:

    Register MediaRing Talk c:\programme\mediaring talk\register.exe All Users

    Uncheck it on Msconfig's startup tab as Ed advised (if you're running Win 98, Me, XP)

    While you're there, also uncheck NewsUpd

    NewsUpd.exe is a spyware program that is silently
    installed when installing certain Creative Labs hardware

    Cheers,
     
  9. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/90051

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice