New
#1
Unknown /unrecognized Microsoft startup files, as shown in Ccleaner
First, let me say very much appreciated being a member here, thank You.
Now, was running ccleaner and noticed a "Microsoft" startup entry I could not identify.
I tried Google for some of the words in the command line, program name and the file name, but got absolutely no hits.
Windows 7 64 Bit SP1
CCleaner entry:
Enabled Key Program Publisher File
Yes HKLM:RunOnce Gopedo Microsoft Corporation C:\Windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\GAMEBO~1\AppData\Roaming\Gekucape\Holibocapu.dat"
Strange thing is, under file properties it shows:
Created - Saturday, October 29, 2016, 4:58:15 PM
Modified - Friday, October 11, 2013, 9:15:48 PM
Accessed - Saturday, October 29, 2016, 4:58:15 PM
The file appears to have been modified long before it was created or accessed.
Opened the CCleaner entry in regedit and the entry is in HKLM / software/Microsoft/shared tools/msconfig/startupreg
Virus scanner, MBAM and rootscanner not giving and indications...so perhaps I am being paranoid?
Any information that anyone here can provide, I would appreciate very much.