Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Randomly named executables appearing in account directory.


  • This topic is locked This topic is locked
1 reply to this topic

#1 AeonFlame

AeonFlame

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:10:55 AM

Posted 01 May 2009 - 10:58 AM

Im not sure why my topic was moved, I did not post any combofix logs. I simply mentioned that it was used. Whatever specific information (filenames etc) I post here are simply from my own observations.
e


There are a series of randomly named executable files that avast detects as viruses being created in my account directory on startup. There are no untoward processes running, and nothing out of the ordinary in my startup list. I use windows xp with service pack 3. This is a pretty old installation, ive had it since 2004, its seen 3 major hardware changes since.

An example of these is Xdsfxsghj.exe


A week prior to this I removed the "lssass" malware from my machine, albeit manually.

I use a combination of avast home, malwarebytes anti-malware and uniblue registry booster. There are no files in my system32 folder created since a few months ago, hidden or otherwise.
Another thing Ive noticed is that explorer seems to crash and reload itself after I've booted. This started happening around the same time I noticed the rogue files.



Can anyone help?

BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:10:55 AM

Posted 01 May 2009 - 02:31 PM

Your topic was moved to Am I Infected

http://www.bleepingcomputer.com/forums/ind...p;#entry1246393

This forum is not for malware issues

If you would have clicked on your old topic link, you would have been redirected there

Edited by garmanma, 01 May 2009 - 02:33 PM.

Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users