Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I noticed chinese characters inside my register under HKLM\System\CurrentControlSet\Services. Inside these there was nothing. I googled the strings and found nothing. Anyway for me to identify these? Think its a virus?

share|improve this question
    
I can understand that you might not be able to copy and paste, but at least a screenshot would be helpful. –  wfaulk May 7 '12 at 0:31
    
If you have any doubt whatsoever it's time to nuke the system and restore from a known clean backup. The problem is less likely to be the things you find than the things you haven't found. –  John Gardeniers May 7 '12 at 2:29

1 Answer 1

The subkey under services which they are in should indicate the service name. If the service name appears randomized (as it would if it doesn't appear in google and is in Chinese, especially if you aren't running any Chinese software), there is a pretty good chance that it is related to a virus.

However, as the keys are empty, it's unlikely they actually do anything.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.