i hope i am putting this info in the right place, i'm kinda new to writing in forums. i often come to this site to check what certain processes in the task manager are and what they are there for. a couple of days ago i downloaded a program and found out later that it was some kind of virus or malware. my internet explorer kept openning multiple pages at a time , all were for different kinds of ads. other than that happening nothing else seemed to have changed on my system. so i ran malware-bytes and avg antivirus they both picked up some virus and malware, i took regular action for eliminating both problems, rebooted and still the same thing was happening, i turned off system restore,then rebooted into safe mode and ran Malware-bytes, disk cleanup , a registry repair program . then rebooted and turned on system restore. thought all was safe again , until about 10 minutes being back on that the internet explorer started doing it's thing again !!!! so i checked the task manager and looked for any process that didn't look familiar, and would'nt you know it , i found a very odd process running Vgemia.exe , so i tried to google it and it could not find any reference to this process, i also searched on bleeping computer.com and could not find any info at all anywhere on the net. so i decided to wing it and try to get rid of it. this is what i did and so far it seems to have worked (just in case anyone out there comes across this problem ). i am running windows xp pro -service pack3
go to start and click on search, then type in Vgemia.exe and search in all files and folders , then click search. 2 items matching that name were found and displayed, looking at the path i found them to be in the windows folder, so i deleted them both. then turn off system restore and reboot into safe mode by tapping the F5 key as soon as it starts booting . once in safe mode run disk cleanup , malwarebytes -complete scan not quick scan ( it shouldn't find anything now), then open internet explorer click on tools , internet options, delete browsing history, and if you have any other type of internet browser you should also delete it's browsing history, when it's done close all open pages , reboot normally . turn on system restore and run malwarebytes again ( and again it should not find anything) . i've kept an eye on my windows folder and task manager and have not found anything related to Vgemia.exe , so far so good and internet explorer is back to normal
so there it is, i don't know if this is a new strain of virus or malware and not many people know about as i could not find anything about it on the net. i hope this can help someone else who might be in this position too EDIT: Moved from XP forum to Am I Infected, more appropriate forum ~ Hamluis.
Edited by hamluis, 25 April 2010 - 07:05 AM.