Chinese Profile

[coulters]

I have several workstations that have a profile with three little boxes. From searching on other sites, I understand this to be in chinese and it means "talks while asleep" or something like that. I can delete it, but it comes back when logging back in. Other people have this problem, but no one can explain why. Some said they got it after installing SMS Feature Pack, but I have not done that. Anyone know how to get rid of it and what's causing it?

 

[mjinks61]

Coulters,

There are a couple things that could cause this,

One would be you have a spyware/trojan program running. Try installing and running AdAware 6 and see what it finds.

You can get it at

http://www.lavasoftusa.com

for free.
The name sounds like something mabe sending out information?

Regardless what the program is, you can most likely stop it from running on a reboot, by editing the registry

From start/run run regedit

follow the path of:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\windows\CurrentVersion\Run

in here you should find a string value that makes a call to your problem program.

Simply highlight the offender, and hit delete.

good luck

 

[chulogordito]

I've got the same problem and it sure ain't spyware.

 

[coulters]

FYI. I tried the adaware and checking the registry and there was nothing there. We use Compaq support, so I opened a case. If they can't solve it, they will escalate it to Microsoft. When I hear what this is and how to get rid of it, I'll post it.

 

[coulters]

I just got off the phone with HP and Microsoft. We have found the reason for this profile. When the SMS Hardware Inventory Agent service starts, it uses the SMS_def.mof file. Withing the .mof file, the registry provider uses WMI 1.5 and this creates the profile. They said this is a bug and there is a fix. Here is the white paper on this issue.

http://support.microsoft.com/default.aspx?scid=kb;en-us;816740

Microsoft didn't even know someone had translated it into Chinese.

Good Luck!