Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Startup Program Not Found In Database


  • Please log in to reply
2 replies to this topic

#1 ajellis

ajellis

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:16 AM

Posted 30 January 2007 - 05:03 PM

I came across a startup entry on my laptop that I did not recognize and did not find in the database:


Filename: Coxmenu.exe reboot
Registry Value Name: [Coxmenu]
Command: D:\Coxmenu.exe reboot
File Location: ? (nothing should be located on the D: drive without a disk inserted, which there is not!)
Description: ? (no idea what this is)
Status: ? (not sure, but I am disabling it now)


Line from HijackThis log:

O4 - HKLM\..\Run: [Coxmenu] D:\Coxmenu.exe reboot


Any ideas?
ajellis

BC AdBot (Login to Remove)

 


m

#2 Walkman

Walkman

  • Banned
  • 1,327 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:16 AM

Posted 30 January 2007 - 06:35 PM

Post your complete HijackThis log in the HJT forum.

#3 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,395 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:10:16 AM

Posted 05 February 2007 - 12:20 PM

Download this program:

submit files packer

Highlight the files listed below in bold and right-click and selecting copy.


D:\Coxmenu.exe


Then start the file packer program and right click in the white box and select paste to paste the copied file names in the field.

Then press the Continue button.

I will create an archive with these files and a small log on your Desktop that starts with a name like requested-file[date].cab.

Rename this file to yourmembername.cab (for example grinler.cab).

Then go to:
http://www.bleepingcomputer.com/submit-malware.php
and fill in the required fields and browse to this file on your desktop. Finally click on the Send File button.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users