Last week, I got a pop up saying my real player needed to be updated in order to play a video I was trying to veiw on a website. While it was updating, i got a pop up from my spybot search and destroy that this update was trying to change something in the registry. I don’t know enough about this, but I figured that since i was updating something, I should allow change. (I don’t know what it was that was about to be changed, I didn’t write that down)
Well, since then, every time I turn on the computer, I get several pop ups-- I actually thought to write these down!
“Spybot search and Destroy has detected an important registry entry that has been changed”
System start up global entry value detected
Entry: rmoc3260dll.Dcx
Old data: regsvr32exe/c (this is in C:windows\system\32\rm)
Then there’s another from Spybot S&D
Entry: rpbrowserrecordplugin.dll.ocx
Old data: regsvr32.exe/s (C:Program files\real\real)
I always click deny change. And it comes up every time I start up the computer.
Here is what I have done so far:
First, I tried to run my Avast AV–It wouldn’t even start–some pop up saying I couldn’t use it. I went to ADD/REMOVE in control panel, and it wouldn’t remove–again, something about some file not being available. (I’m sorry i didn’t write these down at the time)
Second, I ran CCleaner, Spybot and Ad-aware.
Those found sume stuff that I got rid of (Put in the program’s chests) Some were high risk, but most were negligible risk.
After that, I was able to run my AV. I did a deep scan.
After the scan was done, it said several files couldn’t be scanned because they were password protected. These were in Documents and Settings, and there were a lot of them-- I think the number was 190!
As far as i know, I have not set up any files that are password protected! I am the “Administrator” and this is a home use computer.
I’m sorry i didn’t think to write any of these down before today, and if you need me to rerun any of the scans to find out what it says, I will do so. I don’t know if you’d need this, but I will paste a copy of the HiJack This scan, too.
THANKS!!
ooops! I can’t paste the HiJack this file, I got an error thingy saying I had exceeded the maximum allowed length in my post!
Oh yeah, one other thing I tried to do-- I tried to do a system restore to a date before I had done the Real Player upgrade, and I got some “unable to restore” type of message saying some file was missing. Again, I didn’t write that down-- I can go back and find out what it is if you need.
I’ll post the Hijack this log, too.