Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

unknown running process


  • This topic is locked This topic is locked
3 replies to this topic

#1 raices2

raices2

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:44 PM

Posted 12 October 2012 - 09:08 AM

I ran dds com scan and found a running process that I cannot get any further information on. Can anyone help me determine if it is malware and how I can get rid of it?
Thanks


============== Running Processes ===============
...
C:\WINDOWS\TEMP\WV43E3.EXE

BC AdBot (Login to Remove)

 


#2 Maurice Naggar

Maurice Naggar

    Eradicator de malware


  • Malware Response Team
  • 1,088 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:44 PM

Posted 13 October 2012 - 01:48 PM

Hello raices2,

The DDS logs were truncated. Please try again. and make sure you COPY all lines & then Paste into main of reply box.


Download DDS and save it to your desktop from http://download.bleepingcomputer.com/sUBs/dds.com here
or http://download.bleepingcomputer.com/sUBs/dds.scr or
http://www.infospyware.net/sUBs/dds

Disable any script blocker if your antivirus/antimalware has it.
Then double click dds.scr to run the tool.
DDS will run in a command prompt window and will take 3 to 4 minutes or so.

  • When done, DDS will open two (2) logs:
  • DDS.txt
  • Attach.txt
  • Save both reports to your desktop.
Please Copy & Paste contents of the following logs in your next reply:
DDS.txt
Attach.txt



Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

~Maurice Naggar
MS-MVP (Oct 2002 - Sept 2010)

#3 raices2

raices2
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:44 PM

Posted 17 October 2012 - 02:57 PM

Thank you for your reply. After further investigation, seems it was a TrendMicro office scan item: found after search:
"....TrendMicro process Ntrtscan will spawn a single randomly named, suspicious looking process that runs from either c:\windows\Temp or c:\winnt\temp..."

Seems it was not threatening after all. Thank you for your help.

#4 Maurice Naggar

Maurice Naggar

    Eradicator de malware


  • Malware Response Team
  • 1,088 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:44 PM

Posted 18 October 2012 - 08:13 AM

You're welcome. Wish you well.
~Maurice Naggar
MS-MVP (Oct 2002 - Sept 2010)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users