Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unknown Processes


  • Please log in to reply
7 replies to this topic

#1 SaxonManFinland

SaxonManFinland

  • Members
  • 159 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:British was living on Russian Boarder in Finland
  • Local time:03:38 PM

Posted 16 February 2006 - 11:32 AM

Hi All

Back again after a 6 month break. Collage, new baby and busy busy busy. In helping someone else I decided to check my own PC for security.

FOUND these 3 Processes Running. I have no idea what they are............BUt web says "Bad News"

NB. ALL entries dissapeared when I re ran HJT an hour later???

Anyone advise if these are bad and if I need to submit full HJT Log (I know you are pretty busy) Fame has its downside!!!

c:\2468678a971131d282dc413321\mrtstub.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\winlogon.exe....TWO SEPERATE ENTRIES not a typo

Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)


Thanks

Stuart :thumbsup:

BC AdBot (Login to Remove)

 


#2 SaxonManFinland

SaxonManFinland
  • Topic Starter

  • Members
  • 159 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:British was living on Russian Boarder in Finland
  • Local time:03:38 PM

Posted 16 February 2006 - 03:35 PM

Woops..........

C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe

NOT Winlogon...........

AND c:\2468678a971131d282dc413321\mrtstub.exe is reported AS CRITICAL on some sites but found many others saying it is a perfectly safe Windows application!!!!

Confused of Finland :thumbsup:

#3 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:03:38 PM

Posted 17 February 2006 - 03:47 AM

Please visit http://virusscan.jotti.org/
Click on Browse... and navigate to the following file: C:\WINDOWS\system32\wuauclt.exe
Click Open
Please let me know the results.

Do the same for the other two files.

David

#4 SaxonManFinland

SaxonManFinland
  • Topic Starter

  • Members
  • 159 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:British was living on Russian Boarder in Finland
  • Local time:03:38 PM

Posted 15 March 2006 - 01:06 PM

David, Thanks and sorry for the delay in replying..........

Strange I can NO LONGER find these files with HJT..............???

Maybe I ran it whilst still booting, I have no idea, but I will follow up on what you suggest and post back answer

T.A

#5 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:03:38 PM

Posted 15 March 2006 - 01:35 PM

Hmm...strange - we'll see what Jotti finds :thumbsup:

#6 SaxonManFinland

SaxonManFinland
  • Topic Starter

  • Members
  • 159 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:British was living on Russian Boarder in Finland
  • Local time:03:38 PM

Posted 16 March 2006 - 04:31 AM

System32\wuaucit.exe came back clean...............

However the mrtstub would not upload.............and the web is VERY unsure about it. Some say KILL some say Its MS Tool and OK. MS are a bit guarded and say they use it with their removal tool and a specialist company say its an OK file.no world reports of problems.

I located it in Windows\prefetch.so I will leave it for now, but MS says it should auto remove on reboot, and manual removal is possible.

Still somewhat confused, but it seems c:\2468678a971131d282dc413321\mrtstub.exe is confusing a lot of people. :thumbsup:

#7 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:03:38 PM

Posted 16 March 2006 - 12:32 PM

System32\wuaucit.exe came back clean...............

I'm confused now....do you mean wuauclt.exe?
David

#8 SaxonManFinland

SaxonManFinland
  • Topic Starter

  • Members
  • 159 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:British was living on Russian Boarder in Finland
  • Local time:03:38 PM

Posted 17 March 2006 - 11:16 AM

System32\wuaucit.exe came back clean...............

I'm confused now....do you mean wuauclt.exe?
David


:thumbsup: :flowers: :trumpet: Sorry typoo..............I checked C:\WINDOWS\system32\wuauclt.exe so checked correct file , just typed it wrong :inlove:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users