Registry change created

Discussion in 'Malware Help (A Specialist Will Reply)' started by chad-roscoe, Mar 3, 2007.

  1. chad-roscoe

    chad-roscoe Private E-2

    Hello, This keeps happening (like 6x/day) on my computer and McAfee keeps telling me to block it.
    What is it, and can I stop it or should I allow it, or will I forever have to keep hitting block?
    Thanks so much~
    Chaddie confused

    PS, this is what the McAfee pop-up says:
    Details
    SystemGuard Name: Internet Explorer Security Zones
    Change: Registry Created

    More Info
    SystemGuard Description: Internet Explorer has four predefined security zones: Internet, Local intranet, Trusted sites, and Restricted sites. Each security zone has its own security setting, which is predefined or customized. Security Zones are a target of some spyware or other potentially unwanted programs because lowering the security level allows these programs to bypass security alerts and act undetected.

    Process: C:\WINDOWS\system32\igfxtray.exe
    Affected Items: HKEY_USERS\S-1-5-21-619816884-1098185916-3134774528-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\me\
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    igfxtray.exe is your Intel Graphics Adapter helper, its the intel icon in your system tray, it can be stopped from starting with your PC but causes no harm, so allow it in McAfee.
     
  3. chad-roscoe

    chad-roscoe Private E-2

  4. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    I dont own him as he is my neices, she has a set of them, Gorilla, Cow and Moose, I just took pictures back in 2003 to use in some artwork and though avatar would be nice.
     
  5. chad-roscoe

    chad-roscoe Private E-2

    i am jealous. cow and moose? i never saw those! lucky neice!
    thanks so much again for your help!
    :)
    chadster
     
  6. chad-roscoe

    chad-roscoe Private E-2

    Halo, my primate friend, I need your help again. I click allow, but it still asks me like 8 times a day. And I keep clicking ALLOW, but the bast!d won't go away.
    :(
    Can you help me?
    chaddie-boy
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please describe exactly what you are referring to. What are you allowing? What won't go away? Are you still referring to igfxtray.exe?

    Also note this it the Malware Removal Forum. If you are having problems understanding how certain software works or how to configure it, you should really ask those questions in the Software Forum unless they are specific malware related problems. What you posted in your first message related to igfxtray.exe was not malware.
     
  8. chad-roscoe

    chad-roscoe Private E-2

    Yes chaslang! thank you.
    i cannot get rid of the darn pop-up, allow or not allow.
    it is driving me crazy!
    oh, i thought it was malware because it is my virus program that keeps popping up, macafee. so i thought it was a virus as macafee was/is encouraging me to block the change. i didn't install it. i don't know where it came from.
    should i delete this post and move it?
    thanks!
    chaddie
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    It has been on your PC from day 1! See http://www.liutilities.com/products/wintaskspro/processlibrary/igfxtray/

    It is for your hardware. However you don't really need to run this process. It is for convience only.

    It does not make any sense that the igfxtray.exe process would be trying to change a ZoneMap setting. Are you sure that McAfee is reporting things correctly?

    Perhaps you need to run the READ & RUN ME so we can be sure that what is being reported is true.

    Also the last part of the registry key you mentioned ( ....ZoneMap\Ranges\me\ ) does not sound valid.
     
  10. chad-roscoe

    chad-roscoe Private E-2

    Hi again.
    well, what i put in my original post came from the pop-up box that keeps popping up from McAfee.
    Um, I will gladly read and run.
    What is it? and how do i do it?
    sorry to be so dumb...
    thanks!
    chaddieboy
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  12. chad-roscoe

    chad-roscoe Private E-2

    Working throuhg the steps. It just popped up again, so I will post while I continue my read and run:
    Process: C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    Affected Items: HKEY_USERS\S-1-5-21-619816884-1098185916-3134774528-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\me\
    thank you!
    chadster
     
  13. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That's a different process and is related to Sun Java (which is out of date by the way - pay attention to step 6 of the READ ME where it indicates to uninstall old Sun Java versions and install the new version ;) ) Looks like you may have McAfee configure in a form to report all changes to the registry - at least changes to specific areas. It is also possible that McAfee is not smart enough to know the difference between things being put in the Restricted Zone and things being put in the Trusted Zone.


    You may also want to read the below since lot's of people are complaining about this:

    http://forums.mcafeehelp.com/viewtopic.php?p=418292#418292
     
  14. chad-roscoe

    chad-roscoe Private E-2

    Re: Registry change created... sad, so, so very sad.

    Hello again.:banghead
    Well, I worked my way through read and run down to 6A, where I stopped and dumped all my Java and installed new, including Java Bridge, which I had to install to be able to work the chat feature in the online class that I teach, and then I went and followed the instructions from McAfee (thank you very much for finding that for me), and then I went to bed, and, apparently, my computer restarted yet again while I was sleeping (sneaky), and now McAfee is starting on it's own and popping up that @&#*^^#& registry thing like crazy.
    Can I just delete the whole darn thing? Do I really need it?
    I used to have Norton (came with the computer) and it gave me so much trouble (couldn't go to my websites type thing) that I deleted it. McAfee was free from my DSL provider, so I installed it about a month ago. I hate it. I'll be typing away a big email to a student, not even looking, and, unbeknownst to me, the damn McAfee pop-up is up, so none of what I've been typing is there because the damn computer has a "hold the phone!" relationship with McAfee.
    I have pop-up blocker (which I just love), Ad-Aware SE personal, Spyware Doctor, and now the CC cleaner you directed me to.
    Why are the virus programs so much trouble????
    I know there's probably no whining in the armed services, so I'll stop now.
    Thank you.
    chaddie-saddie-boy
     
  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Registry change created... sad, so, so very sad.

    Actually we don't recommend either McAfee or Norton/Symantec. If you are tired of the headaches with it and you cannot either uninstall or disable the items that are driving you crazy then uninstall ALL of McAfee and use programs (free by the way) from the below link:

    How to Protect yourself from malware!
     
  16. chad-roscoe

    chad-roscoe Private E-2

    Re: Registry change created... sad, so, so very sad.

    You have made me so happy.
    Thank you and have a lovely weekend you wonderful person you.
    xx~
    Chaddie
     
  17. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Registry change created... sad, so, so very sad.

    You're welcome. While I enjoy 8 to 10 inches of snow :( , perhaps you will enjoy some sunshine. ;)
     
  18. chad-roscoe

    chad-roscoe Private E-2

    Re: Registry change created... sad, so, so very sad.

    Next time I'm east I'll hunt you down and buy you several beers for that help. If I get there in the snow, we'll make beer slurpees.
    You know what we miss out here besides snow?
    Yuengling.
    What part of Jersey is your part? N or S?
    chadster
     
  19. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Registry change created... sad, so, so very sad.

    I'm not a beer drinker anyway! :p

    Someone is not reading what it says in the messages in the threads. ;)
     
  20. chad-roscoe

    chad-roscoe Private E-2

    Re: Registry change created... sad, so, so very sad.

    Pepsi then? A Nathan's?
    I'm guessing north Jersey (finally, duh), so you don't go "down the shore" like my family.
    As you can maybe guess from the beer choice, I'm a Philly girl originally (though thankfully I don't have the accent!), and I'll tell you, we get the sun, but none of the good food. No good tomatos or peaches, no bluefish, no Italian to speak of. It's so sad. But, I'm trying to adopt the healthy lifestyle. I jog now, on the street. People walking by encourage me "Go girl, looking good!" In Philly they would have tried to hit me with their car doors. We have no charm out here at all.... ;)
    I don't get back too often. Too poor. I'll send some sun your way in the meantime, and you eat something decadent like a hoagie (or is it hero or sub up your way?) for me.
    Thanks again my friend~
    chaddieboy
     
  21. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Registry change created... sad, so, so very sad.

    Hate Pepsi too! Used to be a Coka Cola fan but now I'm into root beer! Nathan's is okay but not a favorite of mine.

    I know what you mean about getting good food especially Italian outside of this area. When I lived in Phoenix for a while it drove me crazy.
     
  22. chad-roscoe

    chad-roscoe Private E-2

    Re: Registry change created... sad, so, so very sad.

    In Philly you must drink Pepsi or you gonna get a beat-down!
    How about a little Breyers' Vanilla in that root beer?
    Phoenix I cannot imagine. Stopped to visit on the initial carvan west. Hotter than the pavement in July!
    Do you make your living here, or are you just a nice guy?
    chad-roscoe
     
  23. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Registry change created... sad, so, so very sad.

    No this is not my job. I'm only here when I can be!
     
  24. chad-roscoe

    chad-roscoe Private E-2

    Re: Registry change created... sad, so, so very sad.

    Well, you are really great.
    Thanks so much again
    :)
    chadley
     
  25. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Registry change created... sad, so, so very sad.

    Thanks! And you're welcome.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds