After updating to SP2 on WinXp Home, I noticed a new folder within C:\Windows named EHome. Within the folder is one file, medctrro.cmd.
Did a bit of research and found it is associated with Windodws Media Center or possibly a virus.
Checked with an updated AVG and a couple of other online scanners, and everything came up clean.
Ran an updated Spybot, AdAware, Windows Defender, CWShredder, and Hijackthis. All came up clean.
The contents of the command file is;
if EXIST %~dp0\ehshell.exe (
if EXIST %~dp0\medctrro.exe (
start %~dp0\medctrro.exe /o -RunOnce
I searched the registry and found nothing for medctrro or ehshell.
Any ideas of why this folder was installed during the SP2 update?
Does anyone else have this folder?
Best Regards and Wishes,
Mesich, Webmaster of mesich.com
Currently stored on a temporary webhost.