Hope it's okay that I'm asking this in its own thread. It's not really related to the TCP question I asked yesterday (though I did mention it in passing as an afterthought).
Since upgrading to 21.1.0.18 yesterday, C:\Windows\SysWOW64\runonce.exe shows up in my history logs as accessing the internet every time I start up my computer. I looked up runonce.exe online and believe it's a legit part of Windows, but I can't figure out why it's suddenly showing up every time I start up or why it's accessing the internet.
I was wondering if anyone else had this and if it's anything to be concerned about. (other exe fils are showing up in the logs that weren't before the upgrade as well--things like SearchProtocolHost.exe and ThumbnailExtractionHost.exe, but I wasn't as worried about those as I was about the runonce.exe)
Hope it's okay that I'm asking this in its own thread. It's not really related to the TCP question I asked yesterday (though I did mention it in passing as an afterthought).
Since upgrading to 21.1.0.18 yesterday, C:\Windows\SysWOW64\runonce.exe shows up in my history logs as accessing the internet every time I start up my computer. I looked up runonce.exe online and believe it's a legit part of Windows, but I can't figure out why it's suddenly showing up every time I start up or why it's accessing the internet.
I was wondering if anyone else had this and if it's anything to be concerned about. (other exe fils are showing up in the logs that weren't before the upgrade as well--things like SearchProtocolHost.exe and ThumbnailExtractionHost.exe, but I wasn't as worried about those as I was about the runonce.exe)
Thanks so much for replying! I went into the registry editor and found RunOnce (thanks for including the path!). It was there under RunOnce and not RunOnceEx (possibly because I'm on Windows 8?) but the only information that came up when I clicked it was Name: (Default) Type: REG_SZ Data: value not set.
NIS hasn't detected anything (I ran scans in both normal and safe mode after updating) but I just found it strange that all of these items--and this one in particular--were suddenly accessing the internet. I want to believe it's just something to do with the upgrade, but I was worried that it might be indicative of something malicious.
roane, see my reply to your other thread about runonce, and other Windows type files.
A warning however, do NOT attempt to alter your registry unless you absolutely know what you're doing. It can render your system unusable, if you get it wrong....
Don’t worry: I’d definitely not attempt to alter the registry. I’ve had one computer go kaput (sp?) on its own this year. I’m not going to help this one join it.
