Weird unidentifiable line in startup processes (XP)

[ksennin]

Hi. I'm new around. Hope I don't breach any rules.

I was doing a cleaning up of the startup processes via msconfig in a c2d pc with xp pro, but in the Startup tab, I see a strange line I had never seen before in any computer, and which did not follow the C:\ syntax. I see:

%systemroot%\rigegmli.exe

and the process is just identified as rigegmli. But google gives me no hits for this or the whole string.

Just what is that and should it be active on the pc or not?

Any help would be appreciated.

Thanks.

Jorge

[Boris]

Sounds malicious to me !

Is your anti-virus up to date ?

Have you done any scans recently ?

[ksennin]

Sounds malicious to me !

Is your anti-virus up to date ?

Have you done any scans recently ?

Yeah, McAfee Security Center preinstalled on a Dell Optiplex 745, continually updated. But shouldnt any malware mention show up SOMEWHERE in google? Or was this the one time I got a brand new malware none else ever found???

[Boris]

Trojans can spawn random names for their .exe files.

If I was you I'd install :-

Malwarebytes' Anti-Malware (just the Free version)

update it and do a full scan

plus

a-squared Free

http://www.emsisoft.com/en/software/free/

update it and do a full scan

[Vino Rosso]

To check out the file, you could upload it to Virustotal - but the file name does look suspicious.

• Highlight all the following in purple and press Ctrl+C on your keyboard to copy
  
• C:\WINDOWS\rigegmli.exe
  
• Please click >here< to visit Virustotal
  
• Click into the blank box on the Virus Total page and press Ctrl+V on your keyboard to paste
  
• Click the Send File button
  

[ɹəuəllıʍ ʇɐb]

I was doing a cleaning up of the startup processes via msconfig in a c2d pc with xp pro ...

Once you have cleared up your potential malware problem, try another tool to manage your startup items: Startup Inspector. It shows you more items than msconfig, and the Consult button will give you detailed information on most of the common startup items.

Many forum members here use it, so I could say that it comes recommended.