[KB2194] ESET Layout.ini file infiltration

Solution

The layout.ini file often contains links to old and non-existing system components. This can cause your ESET product to detect this file as infected while the system continues using it. Please follow the steps below to create a new layout.ini file and avoid such a detection:

  1. Delete the contents of the C:\Windows\Prefetch directory.

    Do not delete the directory

    Make sure to only delete the contents without deleting the directory itself.

  2. Locate the Prefetcher component under the following key in the registry:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ControlSession\ManagerMemory\ManagementPrefetchParameters\ parameter EnablePrefetcher

    Its registry values are:

    3 optimize everything
    2 optimize system only
    1 optimize applications only
    0 Prefetcher turned off

    For example, when the Prefetcher value is set to 3, the Prefetcher tries to optimize the launch of all applications after the system startup. When the value is set to 0, no optimization is applied to any application.
     
  3. After restarting we recommend reverting the setting to its original value.

Chat with ESET AI Advisor for support