New
#1
What is the strange registry entry and how can I delete it?
I have the following registry key that appears to do nothing but keeps re-creating itself:
HKEY_CURRENT_USER\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon
This key contains a Shell value that points to an empty directory on my system:
C:\Users\Birk\AppData\Local\bc53345c\X
If I delete this value it immediately gets recreated. If I use Autoruns to disable it, it still gets recreated. The specified folder in AppData\Local does not exist. I did a registry search for bc53345c and could not find any other instances of it, so how is it getting recreated?
I am reluctant to delete the Winlogon key because I don't know how critical it is.