Missing registry entries

[JoeM]

Was doing a virus scan and Norton found a low risk virus that it
automatically removed. Just to be sure I looked at the docs for the virus and
it mentioned that certain entries may have to be deleted from the registry.
Since I use my own account, most of my keys fall under
HKEY_CURRENT_USER/software/microsoft/windows/current version etc or
HKLM/software/microsoft/windows... or internet explorer/main etc. I noticed
that I do not have any entries under HKCU/software except an empty default
key, and a key named "blah" with the following data

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyOverride =
localhost127.0.0.1*.wired.com*.hotmail.com*.passport.com*.pcworld.com*.cnn.neti.dslr.net*.samspade.orgimages.viacomlocalnetworks.com*.tinyurl.comtinyurl.comwdc.speakeasy.netpcpitstop.comhighlander-official.com<local>

The comptuer still seems to work with no apparent problems with no entries
under software. Additionally, in HKLM/software/microsoft/internet
explorer/main, nearly 2/3 of the entries are missing. Again the computer
doesn't seem to have any problems and I would not have stumbled upon this
situation had Norton not found the virus that may have been present since
March when I did my last full scan.

Question is, do you have any idea what has happened, and what is the "blah"
key and is it a dangerous entry like a virus or spyware? What are the proxy
override settings anyway? Thanks in advance for anything you can offer.
Joe.

 

[PCR]

JoeM wrote:
| Was doing a virus scan and Norton found a low risk virus that it
| automatically removed. Just to be sure I looked at the docs for the
| virus and it mentioned that certain entries may have to be deleted
| from the registry.

(a) What was the name of that virus?
(b) What Registry keys is it supposed to delete?
Do they match the ones you are missing?
If not, were those also gone?
(c) Is it supposed to deliver a "blah" key?

I have no such "blah" key anywhere in my Registry. Also, I am not
missing anything you have sad, that I could determine from what you
said. I certainly have a lot under that Software key you mentioned.

It does not strike me that your "blah" key looks particularly
frightening. It strikes as being a list of exceptions to the use of some
proxy setting you may have installed or set. What do you see at...?...

(1) "START, Settings, Control Panel, Internet Options,
Connections tab".
(2) D-Clk your ISP(s) one at a time in the "Dial-up..."
window for Properties.
(3) Does it seem a Proxy server is used?
If so, click the Advanced button.
Is anything listed in the Exceptions box?

| Since I use my own account, most of my keys fall
| under HKEY_CURRENT_USER/software/microsoft/windows/current version
| etc or HKLM/software/microsoft/windows... or internet explorer/main
| etc. I noticed that I do not have any entries under HKCU/software
| except an empty default key, and a key named "blah" with the
| following data

Do you mean by your "own account" that you are connected to some remote
computer? Then... could be that computer isn't set up to give you a lot
of programs in that Software key. (I really don't know.)

| R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
| Settings,ProxyOverride =
|
localhost127.0.0.1*.wired.com*.hotmail.com*.passport.com*.pcworld.c
om*.cnn.neti.dslr.net*.samspade.orgimages.viacomlocalnetworks.com*.
tinyurl.comtinyurl.comwdc.speakeasy.netpcpitstop.comhighlander-offic
ial.com<local>
|
| The comptuer still seems to work with no apparent problems with no
| entries under software. Additionally, in
| HKLM/software/microsoft/internet explorer/main, nearly 2/3 of the
| entries are missing.

Unless you count how many 2/3 of them is, I can't compare what I've got
to your number.

| Again the computer doesn't seem to have any
| problems and I would not have stumbled upon this situation had Norton
| not found the virus that may have been present since March when I did
| my last full scan.
|
| Question is, do you have any idea what has happened, and what is the
| "blah" key and is it a dangerous entry like a virus or spyware? What
| are the proxy override settings anyway? Thanks in advance for
| anything you can offer.

You are welcome. (But don't think I'm a perfect expert in these
particular matters.)

| Joe.

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR
pcrrcp@netzero.net