My questions is how does this line work?
O4 - HKLM\..\Run: [SearchUpgrader] C:\Program Files\Common files\SearchUpgrader\SearchUpgrader.exe
To my understanding, HKLM stands for HKEY_LOCAL_MACHINE which is a
root key and run registry key causes SearchUpgrader to run each time that a user logs on.
To me SearchUpgrader which is the registry value is being run when the user logs on each time.
My other question, what will HJT remove when it fixes this line
O4 - HKLM\..\Run: [SearchUpgrader] C:\Program Files\Common files\SearchUpgrader\SearchUpgrader.exe
SearchUpgrader.exe is a hyjacker for eUniverse/KeenValue
You’re correct about the \Run key, any programs stored here will run when Windows starts. There are other keys but your entry is in HKLM, which applies to all users of the computer. The HKCU equivalent key applies to the current user.
HJT will list all the program names that are stored in the \Run keys as 04 entries. It will not remove anything unless you tick the boxes alongside the entries you want removed and then choose ‘Fix’.
Report abuse
Details (required):
Thank you.
Reported content has been submitted
Was this reply helpful?
Sorry this didn't help.
Great! Thanks for your feedback.
How satisfied are you with this reply?
Thanks for your feedback, it helps us improve the site.
How satisfied are you with this reply?
Thanks for your feedback.