Windows 10: Weird registry key that I can't get an answer on

I've been searching the web for a while now for an answer, but I can't find one. The registry key is HKEY_CLASSES_ROOT\KSGenerator.KeystrokeGenerator. What is it? Is it safe? I have not installed anything weird...

:)

 

Weird Registry Key

The registry key you mentioned, HKEY_USERS\S-1-5-21-xxx xx xxxx-4196419553-4271603927-1001_Classes\tmp_auto_file, is located in the HKEY_USERS hive of the Windows registry. The HKEY_USERS hive contains information about user profiles on the computer. The long string of numbers and letters in the key's path, "S-1-5-21-xxx xx xxxx-4196419553-4271603927-1001", represents a unique security identifier (SID) associated with a user account.

As I mentioned in my previous answer, the "tmp_auto_file" key doesn't appear to be a standard Windows registry key and its purpose is not immediately clear. If you haven't noticed any negative effects on your computer and your scans with antivirus and anti-malware programs have not detected any issues, it's likely that the key is not causing any harm. However, if you're still concerned, you can try removing the key and see if it causes any problems.

As always, be cautious when making changes to the registry, as modifying the wrong keys can cause your system to become unstable. It's a good idea to backup the registry before making any changes.

You can check the date when a registry key was created by using the Registry Editor built into Windows. Here's how:

Open the Registry Editor by pressing the Windows key + R, typing "regedit" in the Run dialog box, and pressing Enter.

Navigate to the registry key that you want to check the creation date for.

Right-click on the key and select "Export". This will save a backup of the key to a file.

Open the exported file in a text editor such as Notepad.

Look for the line that starts with "Windows Registry Editor Version 5.00". The date and time of the registry key creation will be listed directly below this line in the format "; Created on: [date] [time]".

Note: If the key was not created recently, it may be difficult to determine the exact date it was created, as the information may have been overwritten or lost during an operating system update or other system event.

 

Weird Registry Key

There's a registry key called "tmp_auto_file". I'm unaware if this is a windows registry key, and it's not a product of anything I intentionally installed. I know this because another computer that has all my same apps and games does not have the key at all, and I looked at another one that doesn't have any of the same things (besides steam) and same result. Could someone please help me figure out what this is? I haven't been to any weird websites, and the key is located in HKEY_USERS\S-1-5-21-119954552-4196419553-4271603927-1001_Classes\tmp_auto_file. I also ran Malwarebytes and it found nothing.

Edit: I've seen other registry keys like this installed from other games but I have very few games on my PC right now and they do not create the key when ran.

 

Weird/Unrecognizable entry on Registry Editor

Hello! My name is Mostafa, and I will try my best to assist you with this so that you find a satisfactory solution.

I’m sorry that you are experiencing this issue. The entry you're seeing in the Registry Editor is written in Chinese characters, and its purpose is unknown.

You can try to identify the source of the Registry key:

1. Use your antivirus or anti-malware software to perform a full system scan and look for any signs of malicious software on your computer. If the scan detects anything, follow the recommended steps to remove the malware.

2. Open the Task Manager and go to the "Startup" tab to see if there are any programs listed that you don't recognize. If you find any suspicious programs, research them online to see if they're related to the Registry key you're seeing.

3. There are several tools available that can monitor changes to the Registry and alert you when new keys or values are added. These tools can help you identify the source of the Registry key and determine if it's related to a legitimate program or not.

You can try to remove it by following the steps below:

1. Press the Windows key + R on your keyboard to open the Run dialog box.

2. Type “regedit” (without quotes) and press Enter.

3. Navigate to HKEY_CURRENT_USER\潃瑮潲慐敮屬敄歳潴p.

4. Right-click on the registry key and select Delete.

5. Confirm that you want to delete the registry key.

Registry Disclaimer: Important this section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs.

How to back up and restore the registry in Windows

https://support.microsoft.com/en-us/topic/how-t...

I hope the above steps helped you. In case of additional questions, reach out back to me, and I will be happy to help and try my best to resolve your issue. Thank you.

Best,

Mostafa