Is this a spyware infection?

**ssk_the_gr8** · 02-06-2008, 04:34 PM

i have some weird program in my start up named fsm..it doesnt even have a path.
I found this out in Mike Lin's startup CPL 2.8
can someone please tell me what it is?
here is an image.

And if i look for the program in msconfig
i find a startup item with no name ,no command & a path "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ru n"

here is the image

Cant seem to figure this out...do i just disable it..
BTW i just installed AVG8 free edition

Nobody seems to be helping me out here ..

sreenidhi88 · 03-06-2008, 09:37 AM

why don't you delete the registry key.in hklm>software>microsoft>windows>currentversion>run >
navigate here and delete the key.
tell me what happened

**ssk_the_gr8** · 03-06-2008, 01:29 PM

which registry key i cant find any??

hullap · 03-06-2008, 01:42 PM

get a better antivrus
NOD32 or Karpersky
If u want a free antivirus better get avast or antivir

EDIT, i noticed its a spyware issue,
get spybot S&D, and maybe ad-aware

sreenidhi88 · 03-06-2008, 01:48 PM

Quote:

Originally Posted by ssk_the_gr8

which registry key i cant find any??

one immediate solution would be to delete the registry key.hoping that you wont run that malicious program again until you install good av.go for mcafee total security ;i am using it and has got no probs.

if you are not clear about which registry key to delete have a look at my post HERE you will definitely get some idea!

the problem with avast (in my case) is it detects the virus no doubt abt it ,however it falls back in getting the virus removed after it has detected it.so i switched over to mcafee.

**ssk_the_gr8** · 03-06-2008, 09:13 PM

ok will try deleting the registry or disabling it from msconfig ..lets see what happens..
I'll also give spybot a try...

installed Spybot.. did a full scan.. it did find a different spyware.. but the startup item/ spyware is still their.
should i post a hijackthis log file?

**ssk_the_gr8** · 05-06-2008, 10:52 PM

yaar somebody help me round here

sreenidhi88 · 05-06-2008, 11:26 PM

did u delete the regisrty key.is it creating the key even after deleting the key.????

siddes · 06-06-2008, 12:06 AM

Can you tell us the path in that registry key in the second image you've put up.
The path is more important here. By the way, from the icon it looks like a .bat or .cmd file, most probably in c:\windows or c:\windows\system32