On Thu, 11 Dec 2008 02:23:25 -0800, John Corliss wrote:
>> Is it normal to have these half-dozen items in the hidden autorun key?
> The first one doesn't do anything and the others are normal.
The reason I asked is HiJackThis said this about the Shell Service Object
Delay Load registry key.
HiJackThis: ShellServiceObjectDelayLoad
021 - SSODL: WPDShServiceObj - {AAA2999BA-9A4C-45B0-95D7-94D524869DB5}
C:\WINDOWS\system32\WPDShServiceObj.dll
Detailed information on item 021:
This is an undocumented Registry key that contains a list of references to
CLSIDs, which in turn reference .dll files that are then loaded by
Explorer.exe at system startup. The .dll files stay in memory until
Explorer.exe quits, which is achieved either by shutting down the system or
killing the shell process.
(Action taken: Registry value is deleted, CLSID key is deleted.)


Reply With Quote