autoreg and zero bytes

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by abri, Aug 3, 2006.

  1. abri

    abri MajorGeek

    I found an entry for .autoreg under one of my start menus with 0 bytes and under c:/Programs/Extensions, I found the following entry,
    {972ce4c6-7308-4474-a285-3208198ce6fd}
    installed one minute later the same day. In Google autoreg has several references, but one of them is for using 10 paidmailers at once. Does anyone know if these two things go together and if any harm will come to my computer if I simply delete them?

    As a general question, is there any harm ever in deleting things which have zero bytes? Do things with zero bytes have any function?

    thanks!
    abri
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What is your OS! Did you really mean C:\Programs\Extensions ?
    Or did you mean C:\Program Files\Extensions

    Where exactly is the .autoreg file located?

    This does not sound like malware!
     
  3. abri

    abri MajorGeek

    Sorry Chas

    XPsp2 home

    .autoreg was directly under C:\Programme
    not in any folder. Programme is the german name for program files

    and {972ce4c6-7308-4474-a285-3208198ce6fd} I found under c:\Programme\Extensions
    It's a folder with nothing in it.

    it caught my attention because of the . before autoreg and also, I had been wondering in general if it's okay to delete things which have 0 bytes or if they still serve a function.
    The last 2 days, my computer has begun running and running and running in the background again. I started procexp.exe as soon as I heard it to try and identify what it was, but there is nothing showing on that that shouldn't be running. I'm going looking for a Dr. Watson log, because that's what I've found before. It seems to happen when I've been surfing a lot of websites in a short time.
    thanks!
    Abri
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    It does not sound like malware! Sounds for like part of some script process to auto login or auto register etc. It could be an Browser Add-on too. From IE have you clicked Tools and Manage Add-ons to see what is there?

    A 0 byte file still may serve some purpose.
     
  5. abri

    abri MajorGeek

    I will check IE. I haven't used IE for awhile, am using Firefox. I also wanted to ask you what "failed to get file checksum" refers to. I sometimes get this from Spybot S&D, found it in a Sygate log and it keeps popping up in various logs.
    thanks
    abri
     
  6. abri

    abri MajorGeek

    sorry! just found your comment about checksum error in Spybot S&D in the READ THIS FIRST
    abri
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    No problem! If you still have questions about autoreg, you may want to ask them in the Software Forum as this is not malware related as far as I can tell.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds