Specialty Forums
Security and Virus
General Hardware
CPUs/Overclocking
Networking
Digital Photo/Video
Office Software
PC Gaming
Console Gaming
Programming
Database
Web Development
Digital Home

General Forums
Windows XP
Windows Vista
Windows 95/98
Windows Me
Windows NT
Windows 2000
Win Server 2008
Win Server 2003
Windows 3.1
Linux
PDAs
BeOS
Novell Netware
OpenVMS
Solaris
Disk Op. System
Unix
Mac
OS/2

Drivers
Driver Scan
Driver Forum

Software
Automatic Updates

BIOS Updates

My Computing.Net

Solution Center

Free IT eBook

Howtos

Site Search

Message Find

RSS Feeds

Install Guides

Data Recovery

About

Home
Reply to Message Icon Go to Main Page Icon

exe files added in windows/system32

Original Message
Name: pat122261
Date: June 7, 2007 at 13:48:48 Pacific
Subject: exe files added in windows/system32
OS: XP
CPU/Ram: Intel P4/1G
Model/Manufacturer: VPR Matrix
Comment:
Over the past month my computer seems to be generating small application files (61k)with various names;
bcapj.exe
bdklvvk.exe
bedooj.exe
bhsl.exe
bibtzvdhita.exe
etc,
an then placing them in my windows/system32 directory. It then modifies my startup registry to run these applications. I keep deleting both the files and the startup script, but they continue to return. I have run spybot and McAfee virus scan but does not fix he problem. My conmputer also seems to run slow, especially whne accessing the hard drive. Any suggestions?

Report Offensive Message For Removal


Response Number 1
Name: Johnw
Date: June 7, 2007 at 14:06:44 Pacific
Subject: exe files added in windows/system32
Reply: (edit)
Use HiJackThis to track down or check for possible infections.
Here is all the the info needed to empower yourself, anything you are not sure of, put into a search engine like Google.
Read this link 1st, it has step by step.
http://www.wilderssecurity.com/show...
Important: Create a specific folder on your hard drive called HijackThis to keep its backups.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HijackThis. Download and unzip HijackThis.exe into this folder.
http://www.merijn.org/downloads.html Or, http://tomcoyote.com/hjt/ Or, http://www.spywareinfo.com/~merijn/...
If possible run HJT in Normal mode ( not Safe ) with all your normal startup's working.
HijackThis Tutorial - How to Analyse your own log.
http://spywarewarrior.com/viewtopic...
http://hometown.aol.co.uk/jrmc137/h...
http://www.bleepingcomputer.com/tut...
http://www.malwarehelp.org/understa...
HijackThis log file analysis ( online )
http://hijackthis.de/index.php?lang...
Or,
http://startup.networktechs.com/pag...
http://hjt.iamnotageek.com
Malware Prevention: Prevent Re-infection
http://wiki.castlecops.com/Malware_...
http://www.offroaders.com/ralphtheg...


Report Offensive Follow Up For Removal

Response Number 2
Name: XpUser4Real
Date: June 8, 2007 at 08:44:56 Pacific
Subject: exe files added in windows/system32
Reply: (edit)
pat122261, google those files and see how they can be removed, it's a good place to start

Hopefully my advice will help you...Please post back with your results....thanks


Report Offensive Follow Up For Removal




Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: exe files added in windows/system32

Comments:

 
  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 


Data Recovery Software




DSHUB24 Connection Problems

need help with dsl and dial up

novel 3.12

help mandriva install last straw!

Icon Scaling in Explorer Bar


The information on Computing.Net is the opinions of its users. Such opinions may not be accurate and they are to be used at your own risk. Computing.Net cannot verify the validity of the statements made on this site. Computing.Net and Computing.Net, LLC hereby disclaim all responsibility and liability for the content of Computing.Net and its accuracy.
PLEASE READ THE FULL DISCLAIMER AND LEGAL TERMS BY CLICKING HERE

All content ©1996-2007 Computing.Net, LLC