Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help with wmon32.exe


  • Please log in to reply
3 replies to this topic

#1 Paradiddler

Paradiddler

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Location:Dallas, Texas
  • Local time:10:45 PM

Posted 15 February 2005 - 11:07 AM

Alright, so right when I start to think that my computer is completely spyware free I find one lonely icon in my computer's shared folder named wmon32.exe. When I try to manually delete it an error message pops up saying that it is being used by another person or program, so in other words it's doing something on my computer as I speak that I don't want it doing. Have any of ya'll heard of wmon32.exe, and if you have, could you help me get rid of it? Thanks alot.

BC AdBot (Login to Remove)

 


m

#2 Scarlett

Scarlett

    Bleeping Diva


  • Members
  • 7,479 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:As always I'm beside myself ;)
  • Local time:09:45 PM

Posted 15 February 2005 - 11:17 AM

~ Sophos ~ W32/Agobot-HX is an IRC backdoor Trojan and network worm which establishes
an IRC channel to a remote server in order to grant an intruder access to the compromised computer.
This worm will move itself into the Windows System32 folder under the filename WMON32.EXE and may create the following registry entries so that it can execute automatically on system restart:


What security programs do you have in place. Such as an Antivirus, Firewall or any Spyware/Adware programs.

Here is a good place to start. :thumbsup:

Steps to Keep Your Computer Secure

Edited by scarlett, 15 February 2005 - 12:05 PM.

Posted Image

#3 Paradiddler

Paradiddler
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Location:Dallas, Texas
  • Local time:10:45 PM

Posted 15 February 2005 - 12:08 PM

I run Norton, Spybot, and Ad-Aware SE on a daily baises and recently switched to Firefox.

#4 Scarlett

Scarlett

    Bleeping Diva


  • Members
  • 7,479 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:As always I'm beside myself ;)
  • Local time:09:45 PM

Posted 15 February 2005 - 12:15 PM

Maybe you should consider posting a Highjack This Log. This link will take you to the HJT Forum. Please read the pinned topics at the top. There you will learn all that you need to know regarding the the posting of your log. Good Luck! :thumbsup:

http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/


Just please keep in mind that all Highjack This Team Members are volunteers. One must practice a little patience, when waiting for help. I promise you though that they will get to you as soon as they are able. :flowers:

And above all do not attempt to work on your log yourself. And only take the advice from an official HJT Team Member. Which will show under thier name and avatar.

One more thing. Do not reply to your own post. As the Team keeps an eye out for zero replies. If they see a reply they will assume that someone is already helping you out. Then I'm afraid that you may get lost in the shuffle.

Edited by scarlett, 15 February 2005 - 12:31 PM.

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users