Have a problem and would like to ask us for help? To learn how to ask your question Click Here! Do you have popups or other malware infecting your computer? If so, Start Here! Are you having trouble using this site? Then you should visit the New User Orientation Center!
Identified as a variant of the Win32:Agent-TEV malware. This infection will have its file shown as missing in a HJT log. In realty, though, this file does exist. It is also known to be a rogue anti-spyware advertiser for Antispy Spider. Last but not least, this infection has been seen to be bundled with the MBR rootkit.
Added by the W32.Mubla.C@mm worm. W32.Mubla.C@mm is a mass-mailing worm that spreads through email and MSN Messenger. It also opens a back door on the compromised computer.
It is assumed that users are familiar with the operating system they
are using and comfortable with making the suggested changes. BleepingComputer.com will not
be held responsible if changes you make cause a system failure.
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them
listed via this method. Pressing CTRL+ALT+DEL identifies programs that
are currently running - not necessarily at startup. For a list of
tasks/processes you should try WinTasks 5 Standard/Professional from Uniblue Systems.
Therefore, before ending a task/process via CTRL+ALT+DEL just because
it has an "X" recommendation, please check whether it's in MSCONFIG or
the registry first. An example would be "svchost.exe" - which doesn't
appear in either under normal conditions but does via CTRL+ALT+DEL. If
in doubt, don't do anything.