• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 188
  • Last Modified:

Should keyboard.exe be in Win2K pro registry?

Hi all,
I've been super stressed by a multipally infected Win2K machine at a small business office. While cleaning off several infections I noticed that keyboard.exe is in

HKLM\software\Microsoft\Windows\CurrentVersion\RunServices

under a key called ConfigurationsLoader which is set with keyboard.exe

I know keyboard.exe can be a malicious file in some instances but I dobn't know if it is also a valid file sometimes.  Is it normal for it to be where I'm finding it in the registry?

TIA!
0
akus1
Asked:
akus1
  • 3
1 Solution
 
rossfingalCommented:
I'd look where it's running from and check it's properties.
I'm running 2000 Pro - no keyboard.exe.

RF
0
 
rossfingalCommented:
Also, check in Task Manager and services.msc for any info on it.

RF
0
 
oBdACommented:
The complete RunServices key shouldn't be there in W2k; that's the pseudo-services entry for Win9x. In addition, keyboard.exe is nothing that's part of a default Windows 2000 installation.

Definition of the RunOnce Keys in the Registry
http://support.microsoft.com/?kbid=137367

So, no, it's definitely not normal to have this entry.
0
 
akus1Author Commented:
Thanks to both rossfingal and oBdA. I'm a lot more confident of removing that keyboard.exe entry now.  After a backup of the registry of course. :)
0
 
rossfingalCommented:
Hi!

Glad someone here could help!  :)

Good luck!

RF
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now