Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

C:\Windows\SysWOW64\fsystem.exe


  • This topic is locked This topic is locked
5 replies to this topic

#1 bluesraker

bluesraker

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:31 AM

Posted 09 June 2011 - 03:23 AM

I get an account management pop up demanding my permission for Fsystem.exe to make changes to my computer. If I click no, the message reappears a second later. It never goes away. I've searched the internet for info on this program, but can't find anything useful. I've run Super antispyware, Spyware Doctor, Malwarebytes Antimalware, rkill, run Avast antivirus from another partition running Windows Xp on this multiboot system. Nothing shows up.

Attached Files



BC AdBot (Login to Remove)

 


#2 snemelk

snemelk

    inżynier


  • Malware Response Team
  • 1,468 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Poland
  • Local time:07:31 PM

Posted 16 June 2011 - 04:25 PM

Hi bluesraker, and welcome to Bleeping Computer.

Please follow our Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help, and post the logs requested! Since you're using a 64bit system, there is no need for a Gmer scan - post just the DDS.txt and Attach.txt logs...
c18903e63196580f.gif
snemelk.hekko.pl - my site with a few computer security tips...
Silesia - that's where I live!

"If I had some duct tape, I could fix that." - MacGyver


#3 bluesraker

bluesraker
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:31 AM

Posted 16 June 2011 - 06:31 PM

I was able to get rid of this by searching fsystem on my computer. I have a multi boot system. I searched for "fsystem" from my WinXP installation. That showed the file that was, until then invisible and impossible to delete. You can't open C:\windows\prefetch folder from Windows 7. After the deletion of all the files with fsystem in them from my file search, I rebooted Windows 7 and the problem was solved. fsystem.exe resides in the C:\windows\SysWOW64. a copy of fsystem.exe, although not exactly with the same name, you can recognize it because it has fsystem in its name. you will find this one in the C:\Windows\Prefetch folder. Delete both and problem is gone.

#4 snemelk

snemelk

    inżynier


  • Malware Response Team
  • 1,468 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Poland
  • Local time:07:31 PM

Posted 17 June 2011 - 04:37 AM

Thanks for the update!
So, may I close this thread?..
c18903e63196580f.gif
snemelk.hekko.pl - my site with a few computer security tips...
Silesia - that's where I live!

"If I had some duct tape, I could fix that." - MacGyver


#5 bluesraker

bluesraker
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:31 AM

Posted 17 June 2011 - 06:43 PM

Yep! Thanks for showing interest in the topic. You guys do a terrific job in helping people with malware problems. I often look through your posts for help in fixing friends infected computers. Keep up the good work!

Bluesraker

#6 snemelk

snemelk

    inżynier


  • Malware Response Team
  • 1,468 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Poland
  • Local time:07:31 PM

Posted 18 June 2011 - 08:58 AM

Thanks for your kind words!!.. :)

Since this issue appears resolved ... this Topic is closed.

If you need this topic reopened, just send me a PM (Send message from my profile) with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
c18903e63196580f.gif
snemelk.hekko.pl - my site with a few computer security tips...
Silesia - that's where I live!

"If I had some duct tape, I could fix that." - MacGyver





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users