ace Posted February 16, 2004 Posted February 16, 2004 Hello TCH family Does anybody know what sfnuploader.exe is? It is running in the processes under WinXP. I have tried to delete it but it returns. Thanks Quote
Head Guru Posted February 16, 2004 Posted February 16, 2004 Did you download recently a play of gamershell.com? A commercial Peertopeer Network. Downloadsoftware @ www.superfastnetworks.com The registry keys \HKLM or HKCU \ Microsoft\windows\currentcontrolset\Run delete in C:\WINDOWS\system32 SUService.exe SFNUploader.exe 809180918091.dat Quote
ThumpAZ Posted February 16, 2004 Posted February 16, 2004 (edited) Something Bill forgot (bad Bill... BAD Bill LOL)... before editing the registry, you should ALWAYS make a backup. Then, after you make the edit, you need to restart for the changes to take effect. Once you have deleted the reg key and restarted, you can then search for and remove the file referenced (in this case sfnuploader.exe) This file is not malicious in and of itself, but is a tracking agent. EDIT: Ace, what makes you suspicious of something going on? Or did you just happen upon this process during routine boredom? Edited February 16, 2004 by TCH-Glenn Quote
ace Posted February 16, 2004 Author Posted February 16, 2004 Ace, what makes you suspicious of something going on? Or did you just happen upon this process during routine boredom? I found it during a forced shut down of several unresponsive programs. Thanks for your help. Russ Quote
Head Guru Posted February 17, 2004 Posted February 17, 2004 Any software that tracks and reports is intrusive in every way. Ace - go and get adaware or spybot. Quote
ThumpAZ Posted February 17, 2004 Posted February 17, 2004 I have the clean install of Spybot and will make it available for download to you for the cost of a PM. I also have a simpler program called Hijack This! and can do the same. All you have to do is assssk (that dracula-type voice goin' on there) -GG Quote
ace Posted February 17, 2004 Author Posted February 17, 2004 The registry keys \HKLM or HKCU \ Microsoft\windows\currentcontrolset\Run Hello, I am unable to find these keys in the registry. I do find values containing "HKLM" & "HKCU. Do I have the right registry location. Please see quote. Thanks Russ Quote
btrfld Posted February 17, 2004 Posted February 17, 2004 Hi ace. QUOTE (Head Guru @ Feb 16 2004, 03:47 PM)The registry keys \HKLM or HKCU \ Microsoft\windows\currentcontrolset\Run I am unable to find these keys in the registry. I do find values containing "HKLM" & "HKCU. The're abbreviations: HKLM = HKEY_LOCAL_MACHINE HKCU = HKEY_CURRENT_USER Hope that helps Jim Quote
ThumpAZ Posted February 17, 2004 Posted February 17, 2004 HKEY_LOCAL_MACHINE\Software\Microsoft\windows\currentcontrolset\Run or HKEY_CURRENT_USER\Software\Microsoft\windows\currentcontrolset\Run forgot the "Software" part Quote
ace Posted February 18, 2004 Author Posted February 18, 2004 Thank you! to all of you that provided helpful infomation in removing sfnuploader from my computer. Your assistance is appreciated. Rock Sign Quote
Head Guru Posted February 18, 2004 Posted February 18, 2004 Go get em ace! heheh always wanted to say that to someone, just never knew a guy named ace. Quote
TCH-Thomas Posted February 18, 2004 Posted February 18, 2004 heheh always wanted to say that to someone lol Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.