|
Posted by Malke on February 5, 2007, 2:03 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Den wrote:
> Hi, I discovered following files on my PC:
>
> C:\Documents and Settings\Bruger\Application Data\Ante knob dart\
>
> - ahwpotpm.exe
> - objonce.exe
> - Real army the.exe
> - sphmdbxn.exe
>
>
> C:\Documents and Settings\All Users\Application Data\borereadmeloudbend
> \
> - hideweb.exe
>
> hideweb.exe is trying to acces local network (as part of IE maybe?),
> but I don't know what those other files do. McAfee scaninning and
> scanning with Windows Defender show nothing wrong. Google search does
> not return anything.
>
> Any idea about this files?
>
Hideweb.exe is not part of Windows or Internet Explorer. Unfortunately,
the Google search for it brings up some pages in French which I can't
read. You might want to send a copy of hideweb.exe to Virus Total where
it will be submitted to lots of antivirus companies for identification.
Then post back with the results.
http://www.virustotal.com/flash/index_en.html
It certainly sounds like you've got some malware, however. I understand
that you've scanned with McAfee and WD but if this machine were in my
shop the first thing I'd do is go through the preparatory work at the
link below and then scan with Multi_AV or Sysclean. I'd also include
scanning with AVG Anti-Spyware (formerly Ewido -
http://www.ewido.net/en/). Follow instructions to do all scans in Safe Mode.
http://www.elephantboycomputers.com/page2.html#Removing_Malware
When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the link above (not here, please).
If the procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a professional computer
repair shop (not your local version of BigStoreUSA). Please be aware
that not all local shops are skilled at removing malware and even if
they are, your computer may be so infested that Windows will need to be
clean-installed. Have all your data backed up before you take the
machine into a shop.
Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
|