Undetected Malware

Question

Hi there, 
 If I want open a image file, then there is a suspect app - maybe malware? Undetected atm?

Sophos User930 · Accepted Answer

Can you export/take a look in the registry at the following key: 
 HKEY_CURRENT_USER\Software\Classes\Applications 
 I assume there is an application listed in there which relates to it. 
 I'm sure it's fine, just a broken entry.

Sophos User930 · Answer

You could maybe search the registry for AppXvsqkg1th80rv6s2rkh5m1hjp3hxryydd see if you can match it back to an application. You could always remove it from the registry having exported it? 
 Maybe check under the keys and values under for example: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\OpenWithList If you see it with .png files? Maybe try other extensions in that path for other images types? I would probably run Process Monitor ( Process Monitor - Sysinternals | Microsoft Learn ) and see what registry keys are read when you reproduce the issue. Sorry, other than that I don't know but Process Monitor should help identify it. Thanks.

Undetected Malware

Top Replies