Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

What Is Echo.exe?


  • Please log in to reply
13 replies to this topic

#1 curioustn

curioustn

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 10 July 2008 - 06:58 PM

I'm confused as to what echo.exe is? It is listed under my processes on my task manager. It isn't something that is there constantly and I've just started noticing it. I work on a computer for my job so I'm wondering if this is something from being monitored or is it some type of virus?? Can anyone help?

Thanks!
Mandy

BC AdBot (Login to Remove)

 


#2 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,579 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:57 PM

Posted 10 July 2008 - 07:09 PM

Do a search on your hard drive for this Echo.exe file and post back the location path. Also, you could upload the file at Jotti for analysis.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#3 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:11:57 AM

Posted 10 July 2008 - 07:14 PM

Hello Mandy and welcome,

echo.exe can be related to a few things, download http://technet.microsoft.com/en-us/sysinte...s/bb896653.aspx once this has opened, it should give you more information on the process. Could you post back the location of the file?
Regards,

Alan.

#4 curioustn

curioustn
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 10 July 2008 - 07:32 PM

Sorry but how exactly do I tell where the location is? I downloaded this and I can see echo.exe on here. I right clicked to see the properties but I'm not sure where I'd see the location of the file. Can you tell me please and I'll get back to you quickly?

Thanks!
Mandy

#5 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,579 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:57 PM

Posted 10 July 2008 - 07:37 PM

In Explorer click Search at the top of the screen, select All files and folders, type "Echo.exe" in the box, choose Local hard drives in the Look in box and click Search.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#6 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:11:57 AM

Posted 10 July 2008 - 07:40 PM

The location is also known as path.
Regards,

Alan.

#7 curioustn

curioustn
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 10 July 2008 - 07:48 PM

Okay, I did the search as instructed and this is what it came back with:

ECHO.EXE-36784C1A.pf C:\WINDOWS\Prefetch Application
echo C:\Documents and Settings\Mandy\taw PF File

#8 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:11:57 AM

Posted 10 July 2008 - 08:14 PM

Most of those entries are pointing to the prefetch folder, this is basically a shortcut folder used by windows to load things faster.
I could find little information on the last entry.

Try using the mentioned earlier and right click the entry and select properties then copy the information in the path: box and the current directory box and paste them here.
Regards,

Alan.

#9 curioustn

curioustn
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 10 July 2008 - 08:17 PM

Thanks Alan. Okay, I hope this is what you meant (sorry I'm not very techy :thumbsup:

C:\Documents and Settings\Mandy\taw\echo.exe

That's what was in the path field.

Thanks,
Mandy

#10 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:11:57 AM

Posted 10 July 2008 - 08:34 PM

Thats ok,

Does this site/tool look familiar?

http://www.tawdis.net/taw3/cms/en
Regards,

Alan.

#11 curioustn

curioustn
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 10 July 2008 - 08:42 PM

No, I'm sorry. I've never seen that one before.

#12 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:11:57 AM

Posted 10 July 2008 - 08:47 PM

In the tool, is the path the same as the current directory of the file?

Just to rule out the possibility of malware, Use the link Budapest provided to Jotti, this will allow you to upload the file and see if it is malware.
Regards,

Alan.

#13 curioustn

curioustn
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:57 AM

Posted 10 July 2008 - 09:34 PM

Okay, I uploaded the file and it scanned it. Under scanner results it says found nothing. Under statistics/Malware everything has a red x beside it except for the following:

BitDefender Packer.Krunchy.C
Ikarus Packer.Krunchy.C

What does this mean? And one more question if you wouldn't mind (if I should do a seperate post it isn't a problem). How can I tell if someone is watching my computer screen?

#14 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:11:57 AM

Posted 10 July 2008 - 09:43 PM

The infection identified could be something minor like a packaging program used to package files together.

There are many ways that someone could gain access to your computer and watching your computer screen. If you want to make sure the system is clean, you should follow the Preparation Guide For Use Before Posting A Hijackthis Log

topic34773.html
Regards,

Alan.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users