Computing.Net > Forums > Security and Virus > exe files added in windows/system32

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

exe files added in windows/system32

Reply to Message Icon

Name: pat122261
Date: June 7, 2007 at 13:48:48 Pacific
OS: XP
CPU/Ram: Intel P4/1G
Product: VPR Matrix
Comment:

Over the past month my computer seems to be generating small application files (61k)with various names;
bcapj.exe
bdklvvk.exe
bedooj.exe
bhsl.exe
bibtzvdhita.exe
etc,
an then placing them in my windows/system32 directory. It then modifies my startup registry to run these applications. I keep deleting both the files and the startup script, but they continue to return. I have run spybot and McAfee virus scan but does not fix he problem. My conmputer also seems to run slow, especially whne accessing the hard drive. Any suggestions?



Sponsored Link
Ads by Google

Response Number 1
Name: Johnw
Date: June 7, 2007 at 14:06:44 Pacific
Reply:

Use HiJackThis to track down or check for possible infections.
Here is all the the info needed to empower yourself, anything you are not sure of, put into a search engine like Google.
Read this link 1st, it has step by step.
http://www.wilderssecurity.com/show...
Important: Create a specific folder on your hard drive called HijackThis to keep its backups.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HijackThis. Download and unzip HijackThis.exe into this folder.
http://www.merijn.org/downloads.html Or, http://tomcoyote.com/hjt/ Or, http://www.spywareinfo.com/~merijn/...
If possible run HJT in Normal mode ( not Safe ) with all your normal startup's working.
HijackThis Tutorial - How to Analyse your own log.
http://spywarewarrior.com/viewtopic...
http://hometown.aol.co.uk/jrmc137/h...
http://www.bleepingcomputer.com/tut...
http://www.malwarehelp.org/understa...
HijackThis log file analysis ( online )
http://hijackthis.de/index.php?lang...
Or,
http://startup.networktechs.com/pag...
http://hjt.iamnotageek.com
Malware Prevention: Prevent Re-infection
http://wiki.castlecops.com/Malware_...
http://www.offroaders.com/ralphtheg...


0

Response Number 2
Name: XpUser4Real
Date: June 8, 2007 at 08:44:56 Pacific
Reply:

pat122261, google those files and see how they can be removed, it's a good place to start

Hopefully my advice will help you...Please post back with your results....thanks


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


explorer.exe won't load, ... I think I'm infected with...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: exe files added in windows/system32

Alway new files in windows/system32 www.computing.net/answers/security/alway-new-files-in-windowssystem32/22064.html

xxxxxx.exe file planted in C:\WINNT www.computing.net/answers/security/xxxxxxexe-file-planted-in-cwinnt/10711.html

win*.exe files. www.computing.net/answers/security/winexe-files/19159.html