Jump to content

Strange HJT entries

  • This topic is locked This topic is locked
2 replies to this topic

#1 Guest_Joey1_*

  • Guests

Posted 30 July 2004 - 01:47 PM

My computer is usually clean. However, when I manually enabled spyware guard and Teatimer, Something strange happened. Spyware Guard warned me that both my default search engine and home page were changing to google.com. I decided to block it. Teatimer said that a value was deleted. Ironically, the value was Teatimer. When I ran hjt, I found these entries that I hadn't noticed before.

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC

The other 04's were all legit. What's going on here? :keybrd:

P.S. I'm using hjt 1.98, and my OS is XP home. A scan with Spybot found nothing. :keybrd:

#2 dave38


    Devout Murphyite!

  • Retired Staff
  • PipPipPipPipPip
  • 8,508 posts

Posted 30 July 2004 - 06:53 PM

Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word

( from http://www.sysinfo.o...tartuplist.php)
Be wary of strong drink. It may make you shoot at tax collectors, and miss!
Please support SWI forum

#3 cnm


    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,317 posts

Posted 02 August 2004 - 10:04 AM

You were running About:Buster - it changes your home page to Google. (Easily blocked or changed to the home page you want).
Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of

Support SpywareInfo Forum - click the button
PayPal - The safer, easier way to pay online!