ereg32.exe

[Joy]

After a recent hard drive formatting and reinstalling my programs, the last
couple of days I'm getting some sort of message about Program Change
ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving me 3
choices: Keep Settings Delete Settings Block Program
The last one being if I don't know what to do, so I've been choosing that
one for now. But each time I turn on the computer I get the message again.
I googled the ereg32.exe, but the only definitive answer I got was one where
someone had it on the E drive (someone's CD rom, I think) and they were told
to delete , and since my D is my CD rom, I'm wondering if that's the advice
I should take.

 

[Pegasus \(MVP\)]

Re: ereg32.exe


"Joy" <joymp2@nospambellsouth.net> wrote in message
news:uYuo775NJHA.4116@TK2MSFTNGP02.phx.gbl...
> After a recent hard drive formatting and reinstalling my programs, the
> last couple of days I'm getting some sort of message about Program Change
> ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving me
> 3 choices: Keep Settings Delete Settings Block Program
> The last one being if I don't know what to do, so I've been choosing that
> one for now. But each time I turn on the computer I get the message
> again. I googled the ereg32.exe, but the only definitive answer I got was
> one where someone had it on the E drive (someone's CD rom, I think) and
> they were told to delete , and since my D is my CD rom, I'm wondering if
> that's the advice I should take.

This sounds like malware to me. Run msconfig.exe, then locate ereg32.exe
under the Startup tab and remove the tick in front of it.

 

[John McGaw]

Re: ereg32.exe

Joy wrote:
> After a recent hard drive formatting and reinstalling my programs, the last
> couple of days I'm getting some sort of message about Program Change
> ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving me 3
> choices: Keep Settings Delete Settings Block Program
> The last one being if I don't know what to do, so I've been choosing that
> one for now. But each time I turn on the computer I get the message again.
> I googled the ereg32.exe, but the only definitive answer I got was one where
> someone had it on the E drive (someone's CD rom, I think) and they were told
> to delete , and since my D is my CD rom, I'm wondering if that's the advice
> I should take.
>
>

Take a look at this

http://www.spywaredata.com/spyware/malware/ereg32.exe.php

and see if anything clicks in your memory about programs you have installed
which may have an online registration function.

John McGaw
http://johnmcgaw.com

 

[PA Bear [MS MVP]]

Re: ereg32.exe

What CD is in your D: drive bay?

cf. http://www.f-secure.com/v-descs/marburg.shtml
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/


Joy wrote:
> After a recent hard drive formatting and reinstalling my programs, the
> last
> couple of days I'm getting some sort of message about Program Change
> ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving me
> 3
> choices: Keep Settings Delete Settings Block Program
> The last one being if I don't know what to do, so I've been choosing that
> one for now. But each time I turn on the computer I get the message
> again.
> I googled the ereg32.exe, but the only definitive answer I got was one
> where
> someone had it on the E drive (someone's CD rom, I think) and they were
> told
> to delete , and since my D is my CD rom, I'm wondering if that's the
> advice
> I should take.

 

[Joy]

Re: ereg32.exe

Actually several - all Broderbund greeting card programs. That chart says
Safe, so what should I do about that window that opens every time I start up
the computer? Choose the Keep Settings?

"John McGaw" <nowhere@at.all> wrote in message
news:eiJHAV6NJHA.3876@TK2MSFTNGP04.phx.gbl...
> Joy wrote:
>> After a recent hard drive formatting and reinstalling my programs, the
>> last couple of days I'm getting some sort of message about Program Change
>> ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving
>> me 3 choices: Keep Settings Delete Settings Block Program
>> The last one being if I don't know what to do, so I've been choosing that
>> one for now. But each time I turn on the computer I get the message
>> again. I googled the ereg32.exe, but the only definitive answer I got was
>> one where someone had it on the E drive (someone's CD rom, I think) and
>> they were told to delete , and since my D is my CD rom, I'm wondering if
>> that's the advice I should take.
>
> Take a look at this
>
> http://www.spywaredata.com/spyware/malware/ereg32.exe.php
>
> and see if anything clicks in your memory about programs you have
> installed which may have an online registration function.
>
> John McGaw
> http://johnmcgaw.com

 

[Joy]

Re: ereg32.exe

No CDs in it; I take them out after I install programs.

"PA Bear [MS MVP]" <PABearMVP@gmail.com> wrote in message
news:%23WNuri7NJHA.1908@TK2MSFTNGP04.phx.gbl...
> What CD is in your D: drive bay?
>
> cf. http://www.f-secure.com/v-descs/marburg.shtml
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> Joy wrote:
>> After a recent hard drive formatting and reinstalling my programs, the
>> last
>> couple of days I'm getting some sort of message about Program Change
>> ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving
>> me 3
>> choices: Keep Settings Delete Settings Block Program
>> The last one being if I don't know what to do, so I've been choosing that
>> one for now. But each time I turn on the computer I get the message
>> again.
>> I googled the ereg32.exe, but the only definitive answer I got was one
>> where
>> someone had it on the E drive (someone's CD rom, I think) and they were
>> told
>> to delete , and since my D is my CD rom, I'm wondering if that's the
>> advice
>> I should take.
>

 

[Joy]

Re: ereg32.exe

Should I do this, in light of the URL that John said to look at? (And my
reply.)

"Pegasus (MVP)" <I.can@fly.com.oz> wrote in message
news:eiEUgA6NJHA.4200@TK2MSFTNGP02.phx.gbl...
>
> "Joy" <joymp2@nospambellsouth.net> wrote in message
> news:uYuo775NJHA.4116@TK2MSFTNGP02.phx.gbl...
>> After a recent hard drive formatting and reinstalling my programs, the
>> last couple of days I'm getting some sort of message about Program Change
>> ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving
>> me 3 choices: Keep Settings Delete Settings Block Program
>> The last one being if I don't know what to do, so I've been choosing that
>> one for now. But each time I turn on the computer I get the message
>> again. I googled the ereg32.exe, but the only definitive answer I got was
>> one where someone had it on the E drive (someone's CD rom, I think) and
>> they were told to delete , and since my D is my CD rom, I'm wondering if
>> that's the advice I should take.
>
> This sounds like malware to me. Run msconfig.exe, then locate ereg32.exe
> under the Startup tab and remove the tick in front of it.
>

 

[John McGaw]

Re: ereg32.exe

Joy wrote:
> Actually several - all Broderbund greeting card programs. That chart says
> Safe, so what should I do about that window that opens every time I start up
> the computer? Choose the Keep Settings?
>
> "John McGaw" <nowhere@at.all> wrote in message
> news:eiJHAV6NJHA.3876@TK2MSFTNGP04.phx.gbl...
>> Joy wrote:
>>> After a recent hard drive formatting and reinstalling my programs, the
>>> last couple of days I'm getting some sort of message about Program Change
>>> ereg32.exe, apparently located at: D:\EREG\ereg32.exe It's giving
>>> me 3 choices: Keep Settings Delete Settings Block Program
>>> The last one being if I don't know what to do, so I've been choosing that
>>> one for now. But each time I turn on the computer I get the message
>>> again. I googled the ereg32.exe, but the only definitive answer I got was
>>> one where someone had it on the E drive (someone's CD rom, I think) and
>>> they were told to delete , and since my D is my CD rom, I'm wondering if
>>> that's the advice I should take.
>> Take a look at this
>>
>> http://www.spywaredata.com/spyware/malware/ereg32.exe.php
>>
>> and see if anything clicks in your memory about programs you have
>> installed which may have an online registration function.
>>
>> John McGaw
>> http://johnmcgaw.com
>
>


Personally, I'd figure out why the system is trying to run ereg32.exe in
the first place, stop it from happening, and then I'd uninstall it. I use
an application called Startup Control Panel
http://www.mlin.net/StartupCPL.shtml which gives very precise information
about what programs are being started with the system and why. There are
other programs that do similar things but this is the one I'm used to. As
for getting rid of the program, if you are not comfortable with going your
own way I'd suggest contacting Broderbund for help with eliminating their
nagware. I don't know anything about how to root it out so I won't presume
to give detailed instructions that might lead you to grief.

John McGaw
http://johnmcgaw.com