why do i have chinese/japanese entries in the registy? help

[drugo]

Hi

searching in the registry i found these keys
my windows 7 64bit sp1 is original , it's italian , and i have no japanese or chinese software

but i found this

can i delete them?
and is there a program ,a registry finder that can help to find out such entries?

thanks

antivirus eset smart security 64bit always update
malwarebyte updated
scanned my system as well

 

[Jacee]

Could they possibly be pictures, songs or videos?

 

[Ztruker]

What is the full registry key path?

 

[drugo]

What is the full registry key path?

hi
i found it in registry there is it

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.둉Ĝ鉵耀Èɹ亨ɹ佸ɹ䷘ɹ䴈ɹ䰸ɹဠɸཐɸ຀ɸධɸೠɸఐɸୀɸੰɸ

HKEY_USERS\S-1-5-21-636928848-2182180944-2936143175-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.둉Ĝ鉵耀Èɹ亨ɹ佸ɹ䷘ɹ䴈ɹ䰸ɹဠɸཐɸ຀ɸධɸೠɸఐɸୀɸੰɸ

 

[Ztruker]

That's not Japanese or even Asian. Looks to me like weird characters from some strange character set.

 

[Alejandro85]

These are file associations entries, looking for extensions with those "chinese" characters. May be due to a flawed install or some piece of virus exploting those. What about making a backup and deleting those? I don't think, given their location and content, would do any bad.

 

[crankypenguin]

I see a lot of Korean entries in there. Like this character 둉 stands for Dyong. But I am not sure what all this means. There is also Chinese 亨ɹ佸 Hang and Huo. Might be a botnet.

 

[drugo]

That's not Japanese or even Asian. Looks to me like weird characters from some strange character set.

These are file associations entries, looking for extensions with those "chinese" characters. May be due to a flawed install or some piece of virus exploting those. What about making a backup and deleting those? I don't think, given their location and content, would do any bad.

i found who does it generate them

2 wipers
1 is balk and secure 64 bit ,unicode

the second is EraserDrop
this can happen when the files are "in use" and for i mean in use , i mean handles , i mean files not open directly by the user

it creates folder and files with such "words"

but to find out such words how can i do it?
i can't do it manually , the registry is huge

 

[UsernameIssues]

~~~
but to find out such words how can i do it?
i can't do it manually , the registry is huge

Why delete them?
Just leave them alone.

 

[LMiller7]

Several characters are Korean, others Chinese, one is ANSI, others are something else. I don't think a translation would lead anywhere except more confusion.

I think the best policy is too leave the keys alone. They may be serving a legitimate purpose for an application. There are no firm rules how the registry is used, only guidelines, and they are frequently ignored. They may have been created by malware but if so deleting them won't delete the malware.