lrxs

[jason]

Hey does anybody have any idea what lrxs is?? It is a program that appears
on startup, gives me some kind of error message that has now words, and is
impossible to remove from add/remove programs. A google search brings up
nothing but some other poor soul who seems to be unable to find out any
information.

It appears in my registry under:

as a value for the keys:

hkey_classes_root/chat file/shell/open/ddexec/application
hkey_classes_root/irc/shell/open/ddexec/application
hkey_local_machine/software/classes/chat file/shell/open/ddexec/application
hkey_local_machine/software/classes/irc /shell/open/ddexec/application

as a key:

hkey_local_machine/software/microsoft/windows/current version/uninstal
the value for the key "uninstalstring" is
"F:\WINDOWS\System32\dllcache\msngr.exe" -uninstall

hkey_users/.default/software/lrxs
hkey_users/s-1-5-18/software/lrxs

both of these have a key "date used"

Anyway, if anybody has any information or can tell me how to get rid of this
it would be greatly appreciated

Thanx

[sponge]

"jason" <jasonagilchrist@hotmail.com> wrote in message news:<XJ0xb.27756$oN2.12354@edtnps84>...
> Hey does anybody have any idea what lrxs is?? It is a program that appears
> on startup, gives me some kind of error message that has now words, and is
> impossible to remove from add/remove programs. A google search brings up
> nothing but some other poor soul who seems to be unable to find out any
> information.
>
> It appears in my registry under:
>
> as a value for the keys:
>
> hkey_classes_root/chat file/shell/open/ddexec/application
> hkey_classes_root/irc/shell/open/ddexec/application
> hkey_local_machine/software/classes/chat file/shell/open/ddexec/application
> hkey_local_machine/software/classes/irc /shell/open/ddexec/application
>
> as a key:
>
> hkey_local_machine/software/microsoft/windows/current version/uninstal
> the value for the key "uninstalstring" is
> "F:\WINDOWS\System32\dllcache\msngr.exe" -uninstall
>
> hkey_users/.default/software/lrxs
> hkey_users/s-1-5-18/software/lrxs
>
> both of these have a key "date used"
>
> Anyway, if anybody has any information or can tell me how to get rid of this
> it would be greatly appreciated
>
> Thanx

No idea, but I'm suspicious of IRC and chat software. If you can't
uninstall it from the control panel, delete the values and the keys,
and also the EXE file on your F: drive. Before doing that, though,
check around for any other EXEs or DLLs that may be associated with it
and see if they're part of the OS or some critical program; if not,
you can try renaming them and if everything works okay, delete them.
If it reappears, I'd also look around for CLSIDs and GUIDs, which look
something like this: 0123456ab-12ab-34cd-56ef-78901234abcd. If any are
CLSIDs for this particular program (they will be in a folder under a
name in the HKEY_CLASSES_ROOT section of your registry), write the
whole CLSID down and then delete that entry in HKEY_CLASSES_ROOT (the
folder above, which will also delete the CLSID folder and an others
under it). Then do a Find and delete any other references to this
CLSID.

Sponge
Sponge's Secure Solutions
www.geocities.com/yosponge
My new email: yosponge2 att yahoo dott com