Win Patrol pops up every 3 minutes alerting that it found a new autostart program… but there is no information except the path, which doesn’t exist…
C:\PROGRA~1\Eraser\Eraser.exe --atRestart
I had this a few months back but I thought WinPatrol removed it when I told it to delete on startup… now its back with the detection date of 15 days ago.
From WinPatrol when I select the Eraser entry the status bar says, “Startup Location: * Disabled * HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run” If I right click the entry I cannot view the file properties or open the location, but I can open an info box.
Within the info box I can scroll left and right and there are 10 hidden* entries here:
I originally just wanted to remove the eraser autostartup, but I these other entries look suspicious as well… can I get some help?
All entries displayed are normal, they’re simply reflecting the software you’ve allowed to be installed for Windows update and IDM. As far as Eraser is concerned, if I remember correctly, it creates a start-up when it’ unable to delete a file/folder due to a lock and deletes the item at next boot.
I thought I removed IDM after I found it randomly calling home… And as for Flash, a few days ago if I tried to update I was redirected to a fake site, something like get2.adobe… anyways ALL OF THESE ENTRIES ARE GONE now if I scroll through them now they say things like Realtek, EMET, WinPatrol… nothing to do with vista or anything like that… A friend a while back said he thought my windows update might be corrupted, but I don’t know.
Either way I don’t want to allow Eraser to start up and I don’t want to have an annoying popup every 3 minutes!
Description: Eraser.exe is located in a subfolder of “C:\Program Files” - usually C:\Program Files\Eraser. Known file sizes on Windows 7/XP are 536,576 bytes (41% of all occurrences), 916,240 bytes and 13 more variants.
There is an icon for this program on the taskbar next to the clock. It is not a Windows core file. The process can be uninstalled in the Control Panel. There is no information about the author of the file. Eraser.exe is able to record inputs. Therefore the technical security rating is 19% dangerous, however also read the users reviews.
If you have any problems with Eraser.exe, you can also remove the entire program Eraser or Secure Clean PC using Windows Control Panel or look for help from the software company Heidi.
[/quote]
Source: Eraser.exe Windows process - What is it?
This program is installed on your computer. Can you open it and see how it can be stopped from starting up at boot time?
From WinPatrol when I select the Eraser entry the status bar says, "Startup Location: * Disabled * HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" If I right click the entry I cannot view the file properties or open the location, but I can open an info box.
Within the info box I can scroll left and right and there are 10 hidden* entries here:
I originally just wanted to remove the eraser autostartup, but I these other entries look suspicious as well… can I get some help?
With regard to IDM. May be it is just a left behind class in the registry. See if the referred file is still around or not.
I am not familiar with how Winpatrol works. How does it identify safe files is not known to me, The Microsoft entries are likely to be valid. Check their signatures in case of doubt. Did these entries show up during or shortly after your latest Windows update?
The first entry is a complete mystery to me.
Please also ask users at the Winpatrol forums. They will likely know better how to understand the alerts. I am making guesses as a best effort without knowledge.
