Guest Joy Posted October 26, 2008 Posted October 26, 2008 After a recent hard drive formatting and reinstalling my programs, the last couple of days I'm getting some sort of message about Program Change ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving me 3 choices: Keep Settings Delete Settings Block Program The last one being if I don't know what to do, so I've been choosing that one for now. But each time I turn on the computer I get the message again. I googled the ereg32.exe, but the only definitive answer I got was one where someone had it on the E drive (someone's CD rom, I think) and they were told to delete , and since my D is my CD rom, I'm wondering if that's the advice I should take.
Guest Pegasus \(MVP\) Posted October 26, 2008 Posted October 26, 2008 Re: ereg32.exe "Joy" <joymp2@nospambellsouth.net> wrote in message news:uYuo775NJHA.4116@TK2MSFTNGP02.phx.gbl... > After a recent hard drive formatting and reinstalling my programs, the > last couple of days I'm getting some sort of message about Program Change > ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving me > 3 choices: Keep Settings Delete Settings Block Program > The last one being if I don't know what to do, so I've been choosing that > one for now. But each time I turn on the computer I get the message > again. I googled the ereg32.exe, but the only definitive answer I got was > one where someone had it on the E drive (someone's CD rom, I think) and > they were told to delete , and since my D is my CD rom, I'm wondering if > that's the advice I should take. This sounds like malware to me. Run msconfig.exe, then locate ereg32.exe under the Startup tab and remove the tick in front of it.
Guest John McGaw Posted October 26, 2008 Posted October 26, 2008 Re: ereg32.exe Joy wrote: > After a recent hard drive formatting and reinstalling my programs, the last > couple of days I'm getting some sort of message about Program Change > ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving me 3 > choices: Keep Settings Delete Settings Block Program > The last one being if I don't know what to do, so I've been choosing that > one for now. But each time I turn on the computer I get the message again. > I googled the ereg32.exe, but the only definitive answer I got was one where > someone had it on the E drive (someone's CD rom, I think) and they were told > to delete , and since my D is my CD rom, I'm wondering if that's the advice > I should take. > > Take a look at this http://www.spywaredata.com/spyware/malware/ereg32.exe.php and see if anything clicks in your memory about programs you have installed which may have an online registration function. John McGaw http://johnmcgaw.com
Guest PA Bear [MS MVP] Posted October 26, 2008 Posted October 26, 2008 Re: ereg32.exe What CD is in your D: drive bay? cf. http://www.f-secure.com/v-descs/marburg.shtml -- ~Robear Dyer (PA Bear) MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002 AumHa VSOP & Admin http://aumha.net DTS-L http://dts-l.net/ Joy wrote: > After a recent hard drive formatting and reinstalling my programs, the > last > couple of days I'm getting some sort of message about Program Change > ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving me > 3 > choices: Keep Settings Delete Settings Block Program > The last one being if I don't know what to do, so I've been choosing that > one for now. But each time I turn on the computer I get the message > again. > I googled the ereg32.exe, but the only definitive answer I got was one > where > someone had it on the E drive (someone's CD rom, I think) and they were > told > to delete , and since my D is my CD rom, I'm wondering if that's the > advice > I should take.
Guest Joy Posted October 27, 2008 Posted October 27, 2008 Re: ereg32.exe Actually several - all Broderbund greeting card programs. That chart says Safe, so what should I do about that window that opens every time I start up the computer? Choose the Keep Settings? "John McGaw" <nowhere@at.all> wrote in message news:eiJHAV6NJHA.3876@TK2MSFTNGP04.phx.gbl... > Joy wrote: >> After a recent hard drive formatting and reinstalling my programs, the >> last couple of days I'm getting some sort of message about Program Change >> ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving >> me 3 choices: Keep Settings Delete Settings Block Program >> The last one being if I don't know what to do, so I've been choosing that >> one for now. But each time I turn on the computer I get the message >> again. I googled the ereg32.exe, but the only definitive answer I got was >> one where someone had it on the E drive (someone's CD rom, I think) and >> they were told to delete , and since my D is my CD rom, I'm wondering if >> that's the advice I should take. > > Take a look at this > > http://www.spywaredata.com/spyware/malware/ereg32.exe.php > > and see if anything clicks in your memory about programs you have > installed which may have an online registration function. > > John McGaw > http://johnmcgaw.com
Guest Joy Posted October 27, 2008 Posted October 27, 2008 Re: ereg32.exe No CDs in it; I take them out after I install programs. "PA Bear [MS MVP]" <PABearMVP@gmail.com> wrote in message news:%23WNuri7NJHA.1908@TK2MSFTNGP04.phx.gbl... > What CD is in your D: drive bay? > > cf. http://www.f-secure.com/v-descs/marburg.shtml > -- > ~Robear Dyer (PA Bear) > MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002 > AumHa VSOP & Admin http://aumha.net > DTS-L http://dts-l.net/ > > > Joy wrote: >> After a recent hard drive formatting and reinstalling my programs, the >> last >> couple of days I'm getting some sort of message about Program Change >> ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving >> me 3 >> choices: Keep Settings Delete Settings Block Program >> The last one being if I don't know what to do, so I've been choosing that >> one for now. But each time I turn on the computer I get the message >> again. >> I googled the ereg32.exe, but the only definitive answer I got was one >> where >> someone had it on the E drive (someone's CD rom, I think) and they were >> told >> to delete , and since my D is my CD rom, I'm wondering if that's the >> advice >> I should take. >
Guest Joy Posted October 27, 2008 Posted October 27, 2008 Re: ereg32.exe Should I do this, in light of the URL that John said to look at? (And my reply.) "Pegasus (MVP)" <I.can@fly.com.oz> wrote in message news:eiEUgA6NJHA.4200@TK2MSFTNGP02.phx.gbl... > > "Joy" <joymp2@nospambellsouth.net> wrote in message > news:uYuo775NJHA.4116@TK2MSFTNGP02.phx.gbl... >> After a recent hard drive formatting and reinstalling my programs, the >> last couple of days I'm getting some sort of message about Program Change >> ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving >> me 3 choices: Keep Settings Delete Settings Block Program >> The last one being if I don't know what to do, so I've been choosing that >> one for now. But each time I turn on the computer I get the message >> again. I googled the ereg32.exe, but the only definitive answer I got was >> one where someone had it on the E drive (someone's CD rom, I think) and >> they were told to delete , and since my D is my CD rom, I'm wondering if >> that's the advice I should take. > > This sounds like malware to me. Run msconfig.exe, then locate ereg32.exe > under the Startup tab and remove the tick in front of it. >
Guest John McGaw Posted October 27, 2008 Posted October 27, 2008 Re: ereg32.exe Joy wrote: > Actually several - all Broderbund greeting card programs. That chart says > Safe, so what should I do about that window that opens every time I start up > the computer? Choose the Keep Settings? > > "John McGaw" <nowhere@at.all> wrote in message > news:eiJHAV6NJHA.3876@TK2MSFTNGP04.phx.gbl... >> Joy wrote: >>> After a recent hard drive formatting and reinstalling my programs, the >>> last couple of days I'm getting some sort of message about Program Change >>> ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving >>> me 3 choices: Keep Settings Delete Settings Block Program >>> The last one being if I don't know what to do, so I've been choosing that >>> one for now. But each time I turn on the computer I get the message >>> again. I googled the ereg32.exe, but the only definitive answer I got was >>> one where someone had it on the E drive (someone's CD rom, I think) and >>> they were told to delete , and since my D is my CD rom, I'm wondering if >>> that's the advice I should take. >> Take a look at this >> >> http://www.spywaredata.com/spyware/malware/ereg32.exe.php >> >> and see if anything clicks in your memory about programs you have >> installed which may have an online registration function. >> >> John McGaw >> http://johnmcgaw.com > > Personally, I'd figure out why the system is trying to run ereg32.exe in the first place, stop it from happening, and then I'd uninstall it. I use an application called Startup Control Panel http://www.mlin.net/StartupCPL.shtml which gives very precise information about what programs are being started with the system and why. There are other programs that do similar things but this is the one I'm used to. As for getting rid of the program, if you are not comfortable with going your own way I'd suggest contacting Broderbund for help with eliminating their nagware. I don't know anything about how to root it out so I won't presume to give detailed instructions that might lead you to grief. John McGaw http://johnmcgaw.com
Recommended Posts