Adlice forum

Software feedback => RogueKiller => Topic started by: Faergor on September 22, 2018, 06:30:19 PM

Title: Another False Positive? PUP RunOnce in registry
Post by: Faergor on September 22, 2018, 06:30:19 PM

Hello, again, one hour later.
I did another Roguekiller scan, in safe mode this time, and it found this:

¤¤¤ Registry : 2 ¤¤¤
[PUP] (X64) HKEY_USERS\S-1-5-21-1239764888-2148109162-3447206424-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce | Application Restart #1 : C:\Windows\System32\msconfig.exe %windir%\system32\msconfig [-] -> Found
[PUP] (X86) HKEY_USERS\S-1-5-21-1239764888-2148109162-3447206424-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce | Application Restart #1 : C:\Windows\System32\msconfig.exe %windir%\system32\msconfig [-] -> Found

Is this false positive please? I uploaded text file. Thanks

Title: Re: Another False Positive? PUP RunOnce in registry
Post by: Curson on September 22, 2018, 08:55:30 PM

Hi Faergor,

These entries are present as RunOnce keys used to modify system startup with MSConfig tool.
You can safely ignore them, but they should be gone on next reboot.

Regards.