Hi
searching in the registry i found these keys
my windows 7 64bit sp1 is original , it's italian , and i have no japanese or chinese software
but i found this
can i delete them?
and is there a program ,a registry finder that can help to find out such entries?
thanks
antivirus eset smart security 64bit always update
malwarebyte updated
scanned my system as well
hi
i found it in registry there is it
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.둉Ĝ鉵耀Èɹ亨ɹ佸ɹ䷘ɹ䴈ɹ䰸ɹဠɸཐɸ ɸධɸೠɸఐɸୀɸੰɸHKEY_USERS\S-1-5-21-636928848-2182180944-2936143175-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.둉Ĝ鉵耀Èɹ亨ɹ佸ɹ䷘ɹ䴈ɹ䰸ɹဠɸཐɸɸධɸೠɸఐɸୀɸੰɸ
That's not Japanese or even Asian. Looks to me like weird characters from some strange character set.
These are file associations entries, looking for extensions with those "chinese" characters. May be due to a flawed install or some piece of virus exploting those. What about making a backup and deleting those? I don't think, given their location and content, would do any bad.
I see a lot of Korean entries in there. Like this character 둉 stands for Dyong. But I am not sure what all this means. There is also Chinese 亨ɹ佸 Hang and Huo. Might be a botnet.
i found who does it generate them
2 wipers
1 is balk and secure 64 bit ,unicode
the second is EraserDrop
this can happen when the files are "in use" and for i mean in use , i mean handles , i mean files not open directly by the user
it creates folder and files with such "words"
but to find out such words how can i do it?
i can't do it manually , the registry is huge
Several characters are Korean, others Chinese, one is ANSI, others are something else. I don't think a translation would lead anywhere except more confusion.
I think the best policy is too leave the keys alone. They may be serving a legitimate purpose for an application. There are no firm rules how the registry is used, only guidelines, and they are frequently ignored. They may have been created by malware but if so deleting them won't delete the malware.
Quote