Thank you kindly for your quick response, Keith. I followed your instructions,but have some questions before I am able to complete.
There were two RUN folders under HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run.
Both had one entry that didn't have any data, which I deleted. They both had 2 enttries that didn't have any quotation marks at all. They are (Defalt)
(Value not set), which I'm assuming I leave and also ctfmon.exe.
. The data for this (which you are probably already familliar with) is c:\WINDOWS\system32\ctfmon.exe . Do I keep this file or delete it?
There were also two RUN folders under HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\Run.
The first RUN folder had 8 entries in it, one of which didn't have any data. I deleted this file. This first RUN folder also had a collapsed folder called OptionalComponents underneath it, which I didn't do anything with.
The second RUN folder had quite a few entries in it and two didn't have any data. I deleted these. Both folders 1 and 2 have entries with data that dont have any quotation marks. Again, do I only delete entries with blank or single quotations or ones that don't have any
quotations as well?
One last question (with this response anyway)
The 1st RUN folder under HKEY_LOCAL_MACHINE..... folder had a couple of entries with unusual looking data. (at least to me) So I wanted th double check with you to see if they should stay or go.
The numerical part of the NAME at the beginning of both entries is the only thing different between the 2. The part that is NOT bolded is the part that is the same in both files. I'm just going to give you the one right now. If you want to see the other, let me know. 0038371155206945
mcinstcleanup. This is a McAfee file.
I hope this all makes sense. I know I've probably given you way more information than you need or (want for tht matter. )Please forgive me if this is the case. I'm just trying to save time on both ends.
Thanks again, Keith.