Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Odd Entry Showing Up In Task Manager At Startup


  • Please log in to reply
2 replies to this topic

#1 B_Mullins

B_Mullins

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:02:04 PM

Posted 13 August 2006 - 10:26 AM

I had noticed that the machine seemed to be running slow so I tried to bring up Task Manager to see what was running and kill a few processes. TM wouldn't come up. So I rebooted and called up TM as my desktop was coming up. In the "applications" window of TM I get a funny (funny wierd/odd as opposed to funny ha ha) entry. I don't have all the characters but it begins {DFDDD4E . Now that looks like something I would expect to find in in the registry in HKeyClassesRoot or suchlike. I tried a search on the hard drive for a program/directory that began with {DFDDD but got no hits. Also, installer comes up shortly after the {D etc. program goes away - on its own or after I put a bullet in its brain. Right now I am killing it and installer as they come up but would like to know if anyone has seen similar behavior and where to look in the registry to stop this once for all. I am experienced with direct NT/2K/XP registry manipulation to keep from permanently puking the OS.

Any assistance would be appreciated.

Bill

BC AdBot (Login to Remove)

 


#2 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:02:04 PM

Posted 13 August 2006 - 10:39 AM

DFD stands for data flow diagram which may be used for viewing satellite maqps ie Google Earth.
Do you have that ap installed on your pc?

In any case, I would recommend disabling it in the startup menu before deleting it and see what repercussions that may have.

I would also recommend doing several web based antivirus and anti-malware scans (using Internet Explorer as they require Active X) in addition to a scan with your resident av ap, updated to the latest definitions.

Panda Activescan
http://www.pandasoftware.com/activescan/co...n_principal.htm
http://www.pandasoftware.com/products/activescan.htm

Trend Micro antivirus and malware scan:
http://housecall-beta.trendmicro.com/en/st...orp.asp?id=scan

Etrust Anti-virus web scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx.

Avast Online scan
http://onlinescan.avast.com/

F Secure online scan
http://support.f-secure.com/ols/start.html

Ewido Online scan
http://www.ewido.net/en/onlinescan/

Trojan scans
Sygate Trojanscan
http://scan.sygatetech.com/pretrojanscan.html


Windows Security Trojanscan
http://windowsecurity.com/trojanscan
See instructions for it here:
http://www.windowsecurity.com/trojanscan/trojanscan.asp

Parasite scan from Aumha:
http://www.aumha.org/a/noads.php
or here:
http://www.aumha.org/win5/a/noads2.htm

#3 jgweed

jgweed

  • Staff Emeritus
  • 28,473 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chicago, Il.
  • Local time:02:04 PM

Posted 13 August 2006 - 10:43 AM

Without the exact character string that you are seeing in the task manager, we are not going to get very far.
Regards,
John
Whereof one cannot speak, thereof one should be silent.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users