This week i have had two unusual entries in the "HKLM/Software/Microsoft/Windows/CurrentVersion/Run
These are as follows:
Value Name: GfetifuloruzifulValue Data: rundll32.exe "C:\WINDOWS\ojarazoh.dll",e
I deleted this entry but it came back repeatedly. In the end I had to move the dll file and just reboot the system that way. It came back with an error "could not find file" (obviously)
Today this one appeared:
Value Name: GfetifuloruzifulValue Data: rundll32.exe "C:\WINDOWS\ugubukukaseg.dll",e
Every time I try to delete it from the registry it comes back again! I don't want to have to keep moving DLLs as there may be nothing wrong with them.
Does anyone know what these registry settings are or what the files are?
Have run a virus scan and it came back clean (using zonealarm extreme)