Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

is this a virus RarSFX0\_start.exe ?


  • Please log in to reply
7 replies to this topic

#1 PULLINGoutmyEYEBROWS

PULLINGoutmyEYEBROWS

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:messing up my computer
  • Local time:09:11 AM

Posted 08 January 2009 - 09:24 PM

i will skip the boring happenings to get me to this find unless needed from u

i have found in my zone alarm firewall this program i have never noticed before
i tried to google and ask.com it and it looks like a virus of some sort but i am not sure

it is: C:Documents and settings\Owner\Local Settings\Temp|RarSFX0\_start.exe

is this something i need to worry about or is this a yucky??

i have already ran malware bytes, launch(drwebreg), asquared, spywareterminator, and somethign else that i do not remember but i think u get my drift-alot of stuff
and nothing has found this but i DID have a bunch of yuckies

i am having a problem with my convertx program as well but i am going to the proper place to post about that - but included here in case its related

if this is not anything to worry about please forgive me i really just want to get my computer cleaned once and for all

winxp 2002 sp2
za firewall
za forcefield
ie7
opera
avast antispy and virus
ccleaner
hijackthis
your uninstaller


thankyou in advanced

Edited by PULLINGoutmyEYEBROWS, 08 January 2009 - 09:49 PM.


BC AdBot (Login to Remove)

 


#2 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:11 AM

Posted 10 January 2009 - 04:29 PM

Try uploading this suspect file at Jotti for analysis.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#3 PULLINGoutmyEYEBROWS

PULLINGoutmyEYEBROWS
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:messing up my computer
  • Local time:09:11 AM

Posted 11 January 2009 - 03:48 PM

Try uploading this suspect file at Jotti for analysis.


i did try but it keeps hanging or freezing
after an hour i checked computer frozen
and it only accepts the first line (below)

this is what is showing in my zone alarm
program controls
programs

it has an icon of a disc? and this is what it says in the entry detail

Product name AutoRun Manager
File name C:\Documents and Settings\Owner\Local Settings\Temp\RarSFX0\_start.exe
Last policy update Not applicable
Version 2.55
Last modified date 9/15/2008 13:31:56
File size 113 KB


again im sorry if im a tard here and this is considered somthign safe
i just do NOT remember seeng it there b4
and when i tried to find it i can only go to documents and settings
there isnt an owner there
and i do not have local settings where my owner folder is or anywhere else for that matter

thankyou

Edited by PULLINGoutmyEYEBROWS, 11 January 2009 - 03:50 PM.


#4 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:11 AM

Posted 11 January 2009 - 04:06 PM

Do you have AVG installed on your computer (or recently installed it)? I think they might be leftover files from an AVG installation.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#5 PULLINGoutmyEYEBROWS

PULLINGoutmyEYEBROWS
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:messing up my computer
  • Local time:09:11 AM

Posted 17 January 2009 - 10:13 PM

Do you have AVG installed on your computer (or recently installed it)? I think they might be leftover files from an AVG installation.



sorry its been awhile
i have been dealing with some family death
actually i did have AVG on my computer at one point a year or so ago
but now i have avast instead
it is defintely possible i did not uninstall correctly.
how would i know for sure ?
and do u think i could delete it?

thanks

#6 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:11 AM

Posted 18 January 2009 - 04:39 PM

Yeah - I would just delete it.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#7 AdemSahin2001

AdemSahin2001

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:09:11 AM

Posted 15 May 2011 - 07:27 AM

Same thing happened on my laptop. While I was trying to install "K-Lite_Codec_Pack-710_Full" I think it was also 5.0.0 not 7.0.1. So at the end of this set up it tried to connect a network and needed "K-Lite Codec Pack.msi" writing "C:\Users\bb\AppData\Local\Temp\RarSFX0\" So I came here.. P.S : Eset-Nod32 didn't give any alarm..

#8 dbpaxil

dbpaxil

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:08:11 AM

Posted 15 September 2011 - 01:56 PM

El Jefe at Yahoo Answers wrote:

Thats a temporary file created by winrar when extracting files and is usually deleted when u run ccleaner,unless its newer than 24 hours old. Nothing to worry about unless a virus was in the extracted files.

names match up anyway.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users