This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Suspicious Registry Entry under Windows\Current Version

2 min read

This thread's last reply is from September 27, 2009, 6:57 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

I have a suspicious registry entry HKEY_Local_Machine\software\microsoft\windows\currentversion\Xzuyusizeba.

Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Xzuyusizeba
Class Name: <NO CLASS>
Last Write Time: 9/27/2009 - 8:05 AM
Value 0
Name: Csugisuce
Type: REG_BINARY
Data:
00000000 43 01 38 03 58 05 71 07 - 61 09 64 0b 68 0d 61 0f C.8.X.q.a d.h.a.
00000010 67 11 61 13 48 15 77 17 - 7c 19 7f 1b 68 1d 2a 1f g.a.H.w.|...h.*.
00000020 12 21 12 23 0a 25 42 27 - 44 29 46 2b 2c 2d .!.#.%B'D)F+,-

Value 1
Name: Kpihebiwelohawu
Type: REG_SZ
Data: 68

Value 2
Name: Elequcineput
Type: REG_BINARY
Data:
00000000 31 01 3b 03 04 05 1.;...

Value 3
Name: Theciceric
Type: REG_BINARY
Data:
00000000 32 01 3b 03 31 05 32 07 - 4e 09 4c 0b 48 0d 3d 0f 2.;.1.2.N L.H.=.
00000010 29 11 27 13 56 15 57 17 - 2c 19 5f 1b 5a 1d 5d 1f ).'.V.W.,._.Z.].
00000020 61 21 13 23 13 25 65 27 - 6e 29 1a 2b 6a 2d 1b 2f a!.#.%e'n).+j-./
00000030 76 31 77 33 72 35 74 37 - 0d 39 0f 3b 7e 3d 0d 3f v1w3r5t7.9.;~=.?
00000040 40 41 @A

Value 4
Name: Bcabodowurafoxo
Type: REG_BINARY
Data:
00000000 5e 4b dd 4c ^KÝL

Value 5
Name: Gnasey
Type: REG_BINARY
Data:
00000000 43 01 38 03 58 05 51 07 - 41 09 44 0b 48 0d 41 0f C.8.X.Q.A D.H.A.
00000010 47 11 41 13 48 15 73 17 - 76 19 73 1b 68 1d 7b 1f G.A.H.s.v.s.h.{.
00000020 42 21 4d 23 5d 25 08 27 - 4c 29 46 2b 40 2d 2e 2f B!M#]%.'L)F+@-./


Value 6
Name: Eyanafapititef
Type: REG_BINARY
Data:
00000000 d9 07 09 00 00 00 1b 00 - 08 00 05 00 19 00 8a 03 Ù. .............


Value 7
Name: Phovuqofoli
Type: REG_BINARY
Data:
00000000 5f d3 1b d3 _Ó.Ó

Value 8
Name: Xgidudorayeherid
Type: REG_BINARY
Data:
00000000 d9 07 09 00 00 00 1b 00 - 08 00 04 00 2e 00 c5 01 Ù. ...........Å.


Value 9
Name: Qgusibeciduwato
Type: REG_BINARY
Data:
00000000 00 00 00 00 ....

Value 10
Name: Tbilahubimudu
Type: REG_SZ
Data: :IEXPLORE.EXE:0:123Mi4567t8

Is this a known registry entry or not? I believe it's part of my malware problem.
Please do not start multiple topics in this room. Stick to your original topic, but do not add any posts to it until you have received a reply from a helper:

viewtopic.php?f=11&t=46144

All extraneous topics will be closed and archived.

As this is an extraneous topic, it is now closed.