|
| Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free! |
mouse.exe removal question
|
Original Message
|
Name: robber2
Date: November 6, 2005 at 08:46:31 Pacific
Subject: mouse.exe removal questionOS: w xpCPU/Ram: 2 gig celeron, 256 MB |
Comment: http://www.bleepingcomputer.com/startups/mouse.exe-11146.html I saw a process running (mouse.exe), saw my computer sending LOTS of data out every time I was connected to the internet, did a google search, found the page at top and followed the removal link on the page, downloaded Autoruns, deleted startup item, mouse.exe, ran Spyware Doctor (scan only) after and still found the registry entry at HKLM\Software\Microsoft\Windows\Current version\RunServices##mouse. Did a regedit from run and it's still there. Here's my question: through regedit, should I delete this entry in the registry? Another question: could this kill my network? I can access files on the client comp, but can't access host computer from client... Thx for the help.
Report Offensive Message For Removal
|
|
Response Number 3
|
Name: jabuck
Date: November 6, 2005 at 21:04:48 Pacific
|
Reply: You should run ewido to make sure that mouse.exe is actually a virus, it will identify it.You can delete the entry in the registry but if it is a virus that will not remove it,and will probably ony remove it from the registry for a few minutes, and should it be legit your mouse may fail next time you start the computer.
Report Offensive Follow Up For Removal
|
|
Response Number 4
|
Name: robber2
Date: November 7, 2005 at 17:48:08 Pacific
|
Reply: ran ewido - couldn't find mouse.exe in registry (or didn't think it was a virus/trojan), but it's certainly in the place that http://www.bleepingcomputer.com/startups/mouse.exe-11146.html indicates it would be, i was just wondering if it's NOT UNSAFE to leave it there or if i should delete that registry entry. i'll see if more advice comes in. thank to all for your help so far.
Report Offensive Follow Up For Removal
|
|
Response Number 5
|
Name: robber2
Date: November 7, 2005 at 17:52:28 Pacific
|
Reply: p.s. ran Spyware Doctor (scan only) after and still found the registry entry at HKLM\Software\Microsoft\Windows\Current version\RunServices##mouse. Did a regedit from run and it's still there, too. hmmm...
Report Offensive Follow Up For Removal
|
|
Response Number 6
|
Name: jabuck
Date: November 7, 2005 at 22:03:20 Pacific
|
Reply: robber2,You can use Hijack This to get rid of it. You can download Hijack This at this link http://www.tomcoyote.org/hjt/ then place it into a folder of it's on, such as C:\HJT, so that back up copies can be made and not clutter your desktop or other folders and the backup copies of deleted items can be easily located if needed. Once saved double click HijackThis.exe, and press "Scan". When the scan is finished,close all windows and browsers (except HT) then place a check in the box to the left of the following item and press "fix checked": O4 - HKLM\..\Run: [mouse] mouse.exe Remember, HT is a powerful tool so use it carefully.
Report Offensive Follow Up For Removal
|
|
Response Number 7
|
Name: robber2
Date: November 8, 2005 at 08:44:22 Pacific
|
Reply: thank you, jabuck. ran the scan, found the entry, will post the log at Hijack this site (for the sake of second opinion) before I fix checked. Thanks for your help on this. I think this insidious little mouse may have killed my network (can access client comp, but now have no permission to access host comp), workin' this one - not been easy to fix yet. (see post # 27059)
Report Offensive Follow Up For Removal
|

Post Locked
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
Go to Security and Virus Forum Home
Results for: mouse.exe removal question
trojan h91746.exe removal help Summary: I also ran the HJT log anaylsis tool. It pointed out several bad and questionable files. I just do not know what to do next. Here is the HJT Log: Logfile of HijackThis v1.99.1 Scan saved at 11:00:50... www.computing.net/answers/security/trojan-h91746exe-removal-help/17979.html
jabuck please help Summary: StartupList report, 07-01-07, 20:53:40 StartupList version: 1.52.2 Started from : C:\HijackThis\HijackThis.EXE Detected: Windows XP (WinNT 5.01.2600) Detected: Internet Explorer v6.00 (6.00.2600.0000... www.computing.net/answers/security/jabuck-please-help/20157.html
Hbinst.exe removal Summary: My NIS/NAV 2004 is telling me that I have an adware threat "Adware.Hotbar" and the file "Hbinst.exe" in my System32 and Temp files. NAV won't delete it. I don't have Hotbar on my Add/Remove programs... www.computing.net/answers/security/hbinstexe-removal/11630.html
|
|

|