Windows 10: HKLM/Software/Microsoft/Windows/CurrentVersion/Policies/SystemEnableLUA Detected As A Malware

I Just Removing Fake Synapstics.exe malware And See This I Need Remove This?


:)

 

hklm\software\wom6432node\microsoft\windows\currentversion\run.auto\worm.autorun.rrt POSSIBLE MALWARE.

From a rescue disk, I ran the normal malwarebytes and the anti rotkits and they detected the following.

I can't find any information on the internet about it.

What should I do ?

Is this a virus?

hklm\software\wom6432node\microsoft\windows\currentversion\run.auto\worm.autorun.rrt

My pc is a SONY VAIO ALL IN ONE, with w 10 pro for 64 bits compilation 18,362,356.

Many thanks to anyone who can help.

 

rgbgp.dll pop up on start

check these for it and just delete it I bet its one of them fake antivirus or malware viruses

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run registry key

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run registry key

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

 

Microsoft claims I signed up for Windows 10...

Probably something like this:

Block Windows 10 upgrades.reg

Windows Registry Editor Version 5.00

[HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"DisableOSUpgrade"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GWX]
"DisableGWX"=dword:00000001

[HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\OSUpgrade]
"ReservationsAllowed"=dword:00000000​
They likely pushed out these registry edits in a Group Policy update.

For home users, I think that GWX Control Panel is a more convenient way to reign in unwanted Windows 10 upgrades. This utility makes it easy to change your mind at a later time.