BleepingComputer.com: C:\Windows\SysWOW64\fsystem.exe

Jump to content

Forum Guidelines

Posted Image Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help


Posted Image Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.


Posted Image DO NOT RUN ComboFix unless requested to.


Posted Image Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.


Posted Image When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.


Posted Image Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
Page 1 of 1
  • You cannot start a new topic
  • This topic is locked

C:\Windows\SysWOW64\fsystem.exe Can't get rid of program. If deleted reappears immediatly

#1 User is offline   bluesraker 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 06-May 10

Posted 09 June 2011 - 03:23 AM

I get an account management pop up demanding my permission for Fsystem.exe to make changes to my computer. If I click no, the message reappears a second later. It never goes away. I've searched the internet for info on this program, but can't find anything useful. I've run Super antispyware, Spyware Doctor, Malwarebytes Antimalware, rkill, run Avast antivirus from another partition running Windows Xp on this multiboot system. Nothing shows up.

Attached File(s)


#2 User is offline   snemelk 

  • inżynier
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 1,368
  • Joined: 26-February 08

Posted 16 June 2011 - 04:25 PM

Hi bluesraker, and welcome to Bleeping Computer.

Please follow our Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help, and post the logs requested! Since you're using a 64bit system, there is no need for a Gmer scan - post just the DDS.txt and Attach.txt logs...
Posted Image
snemelk.hekko.pl - my site with a few computer security tips...
Silesia - that's where I live!
"If I had some duct tape, I could fix that." - MacGyver

#3 User is offline   bluesraker 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 06-May 10

Posted 16 June 2011 - 06:31 PM

I was able to get rid of this by searching fsystem on my computer. I have a multi boot system. I searched for "fsystem" from my WinXP installation. That showed the file that was, until then invisible and impossible to delete. You can't open C:\windows\prefetch folder from Windows 7. After the deletion of all the files with fsystem in them from my file search, I rebooted Windows 7 and the problem was solved. fsystem.exe resides in the C:\windows\SysWOW64. a copy of fsystem.exe, although not exactly with the same name, you can recognize it because it has fsystem in its name. you will find this one in the C:\Windows\Prefetch folder. Delete both and problem is gone.

#4 User is offline   snemelk 

  • inżynier
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 1,368
  • Joined: 26-February 08

Posted 17 June 2011 - 04:37 AM

Thanks for the update!
So, may I close this thread?..
Posted Image
snemelk.hekko.pl - my site with a few computer security tips...
Silesia - that's where I live!
"If I had some duct tape, I could fix that." - MacGyver

#5 User is offline   bluesraker 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 06-May 10

Posted 17 June 2011 - 06:43 PM

Yep! Thanks for showing interest in the topic. You guys do a terrific job in helping people with malware problems. I often look through your posts for help in fixing friends infected computers. Keep up the good work!

Bluesraker

#6 User is offline   snemelk 

  • inżynier
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 1,368
  • Joined: 26-February 08

Posted 18 June 2011 - 08:58 AM

Thanks for your kind words!!.. :)

Since this issue appears resolved ... this Topic is closed.

If you need this topic reopened, just send me a PM (Send message from my profile) with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
Posted Image
snemelk.hekko.pl - my site with a few computer security tips...
Silesia - that's where I live!
"If I had some duct tape, I could fix that." - MacGyver

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users