Unknow registry entry

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have a registry entry under
HKey_Local_Machine\Software\Microsoft\Windows\Current_User\RunOnce that I
can't find any info about and every time I delete it it comes back.
The entry is PIP_Clean and it's looking for a file named travlocl.exe which
it can't find.

I have been unable to find a reference to either of these names.

The weird part (at least to me) is that if I delete the entry it comes right
back as soon as I move off the key.

Any ideas what this is?
 
This sounds like spyware/malware of some variety. Its actually monitoring this key to ensure that its "run command" is always there.

http://www.lavasoftusa.com for AdAware
http://www.safer-networking.org for SpyBot Search and Destroy

For both of the above programs, ensure you check for updates, as the original download may not include the latest definitions files.
 
Back
Top