Computing.Net > Forums > Security and Virus > Weird Processes...Trojans?

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Weird Processes...Trojans?

Reply to Message Icon

Original Message
Name: mpbmorg
Date: November 13, 2004 at 06:54:19 Pacific
Subject: Weird Processes...Trojans?
OS: XP Pro
CPU/Ram: P4 128
Comment:

Hey everyone,
I have some weird processes in my task manager: WebRebates1.exe, WebRebates0.exe, WinAdAlt.exe, and WinAdCtl.exe there might even be more, those just stand out. Are these trojans? Should I post a Hijack Log so ppl can check it and tell me what's up? Thanks, Matt

Kick some ass man


Report Offensive Message For Removal


Response Number 1
Name: Sabertooth
Date: November 13, 2004 at 09:00:55 Pacific
Reply: (edit)

Try this Hijack analyzer, and also do an online scan too.



-- Always do what you are afraid to do --


Report Offensive Follow Up For Removal

Response Number 2
Name: HiJinx
Date: November 13, 2004 at 09:42:36 Pacific
Reply: (edit)

Look in your Add/Remove for WebRebates and WinAd. Also use Spybot and Ad-Aware (you can ge them at download.com).


Report Offensive Follow Up For Removal

Response Number 3
Name: justin leary
Date: November 20, 2004 at 07:23:19 Pacific
Reply: (edit)

Vicious malware at the very least. I got infected with WinAdAlt.exe and WinAdCtl.exe. These files will automatically restart themselves (their process) if stopped, and in task manager (WinXP Pro) dance around so as to slow you down. Provided a task is running, one is unable to do anything to the file (move, delete, rename etc). However, I managed to open these files in an editor, delete all code and (very quickly) stop the process and save the empty file. Hence making the file inert. I believe hijacker or spyware removal tools would also probably fix it.

regards

Justin
Coalition against evil progammers


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge
Poll History




Data Recovery Software