Malware? Registry entry for "ujsesysguard"....

dlb · Oct 26, 2012

Whilst searching the registry for any leftover malicious and/or unneeded entries, I stumbled across "ujsesysguard_RASAPI32" and "ujsesysguard_RASMANCS" in HKLM\Software\Wow6432Node\Microsoft\Tracing. A Google search provides numerous results for "sysguard" as being malware, but nothing for "usjesysguard". A thorough search of the hard drive using Agent Ransack found no files or folders with this name. So, should I delete these registry keys? Leave 'em alone? Would it matter either way?

Thanks!

Oh yeah - Windows 7 64bit Home Premium if it matters

(I didn't post in the malware forum 'cuz this isn't a pressing issue and the PC is now running perfectly - I just want to be sure I don't have any lingering crapola that may cause a future issue)

plodr · Oct 27, 2012

I found this on the Macecraft forum from 2010 posted by a user with many posts

On 64-bit systems, there are actually two Tracing locations.

For 64-bit installed programs, it is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\
For 32-bit installed programs, it is HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\

It should be okay to delete keys associated with programs that no longer exist on your system....but NOT those for programs installed on system. I know that a lot websites that show how to manually remove spyware, rootkits, etc, state to remove the Tracing keys for the malware being removed. So removing them for programs no longer on the system should be same logic.
Click to expand...

Back up that section of the registry, then nuke the offending entry.
If the computer seems screwy, merge the backup back into the registry.

falconattack · Oct 27, 2012

dlb said: ↑

Whilst searching the registry for any leftover malicious and/or unneeded entries, I stumbled across "ujsesysguard_RASAPI32" and "ujsesysguard_RASMANCS" in HKLM\Software\Wow6432Node\Microsoft\Tracing. A Google search provides numerous results for "sysguard" as being malware, but nothing for "usjesysguard". A thorough search of the hard drive using Agent Ransack found no files or folders with this name. So, should I delete these registry keys? Leave 'em alone? Would it matter either way?

Thanks!

Oh yeah - Windows 7 64bit Home Premium if it matters

(I didn't post in the malware forum 'cuz this isn't a pressing issue and the PC is now running perfectly - I just want to be sure I don't have any lingering crapola that may cause a future issue)
Click to expand...

Hi my friend , take a look in this topic :wave

http://www.sevenforums.com/software/47573-problem-pc-tools-6-1-0-25-win7-64-bit-removal-2.html

Log in or Sign up

Malware? Registry entry for "ujsesysguard"....

dlb MajorGeek

plodr MajorGeek Super Extraordinaire Moderator Staff Member

falconattack Command Sergeant Major