📎 AI Summary:
The user initially asks about unusual, seemingly non-existent drive and folder references found in the registry, expressing concern over their origin. They later discover these entries are encrypted with ROT13, which deciphers to file paths related to a Roblox game their child plays. Overall, the thread clarifies that the entries are benign and use ROT13 encoding, alleviating concerns about potential issues with the system.
MrLH

MrLH

Senior Member
Member details
Joined
Mar 5, 2013
Messages
19
Thread Author #1
I don't usually mess with the registry but occasionally manually edit to make small changes. Anyhow, I was doing a search for a particular key and I came across what appears to be references to drives and folders/files that do not exist on my computer. There are a lot of them actually spread out over several places. The first appear in this location:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist

in it are binary values like this:
P:\Hfref\Ybh\NccQngn\Ybpny\Eboybk\Irefvbaf\irefvba-q38201q3r9s24p12\EboybkCynlreOrgn.rkr

This is a fairly new install of 7 Pro g4 and I have checked my system thoroughly and cannot find anything suspicious. Are these normal entries? I couldn't find anything about these weird files or locations anywhere.
Thanks.
 

Solution
MrLH
Ok, figured this out. No issues here. Did not know about the simple encryption method being used. So:

P:\Hfref\Ybh\NccQngn\Ybpny\Eboybk\Irefvbaf\irefvba-q38201q3r9s24p12\EboybkCynlreOrgn.rkr

deciphers to:

C:\Users\Lou\AppData\Local\Roblox\Versions\version-d38201d3e9f24c12\RobloxPlayerBeta.exe

A game my kid plays on my system from time to time.

I don't recall ever seeing these types of entries before but the registry is pretty large and filled with all kinds of stuff.
Sort by date Sort by votes
MrLH

MrLH

Senior Member
Member details
Joined
Mar 5, 2013
Messages
19
Thread Author #2
Ok, figured this out. No issues here. Did not know about the simple encryption method being used. So:

P:\Hfref\Ybh\NccQngn\Ybpny\Eboybk\Irefvbaf\irefvba-q38201q3r9s24p12\EboybkCynlreOrgn.rkr

deciphers to:

C:\Users\Lou\AppData\Local\Roblox\Versions\version-d38201d3e9f24c12\RobloxPlayerBeta.exe

A game my kid plays on my system from time to time.

I don't recall ever seeing these types of entries before but the registry is pretty large and filled with all kinds of stuff.
 

Upvote 1 Downvote
Solution
You must log in or register to reply here.