UNREGMP2.EXE

[grimmy26]

The following error appears on every computer on this particular network that I look after when you logon before the desktop appears.

This program has performed an illegal operation and will be shutdown. When you click on details it says:-

UNREGMP2 caused an invalid page fault in module SHELL32.DLL at 018f:7fcbcf19
....and then a load of machine code.

When you select close it opens the desktop fine. This happens to all users on all p.c's except if the user has domain administration rights.

 

[1101001100110101]

Run msconfig and see if its running at startup. I think its malware. You might want to do a search in your registry and hd for it and delete it as well.

 

[carrr]

UNREGMP2 is an exploit.

http://www.pestpatrol.com/pestinfo\u\unregmp2_exe.asp

"'Tis an ill wind that blows no minds." - Malaclypse the Younger

 

[grimmy26]

thanks for the reply.
I already did a search for it and the file sits in the c:\windows\inf directory and is referenced tens of times in the registry.
I think it is needed so I am not keen on deleting it really. Had a look in msconfig as suggested but no mention of it.

 

[grimmy26]

carr,
thanks for that but what does that mean that it is an exploit?

 

[1101001100110101]

if your worried you need it then back it and your registry up and delete it our try runing a spyware program to delete it. An expliot is basicly a back door to your system a hacker can use. By runing a bad code/script to take advantage of it.