what is 74be16.exe? how ı can delete it

November 11, 2009 at 14:13:25
Specs: Windows Vista
hi everyone.
ı have a big problem with my pc..when ı start my pc appear suddenly a message box and written that failed to load kernel library and when ı look at the task manager ..appear and dissappear about a period..74be16.exe file ..what is this it is a trojan? how ıcan delete it?..ı m looking forward to help you..thanks

See More: what is 74be16.exe? how ı can delete it

Report •

November 11, 2009 at 16:52:17
It's a worm.

Do you know if your Vista is 32bit or 64bit. If not run the following tool.

Please run RSIT.exe by random/random and post its logs.

Download random's system information tool (RSIT) by random/random from the following link and save it to your desktop.


1. Double click on RSIT.exe to launch program.
2.(Vista Users Only) Right click on the RSIT.exe icon and select "Run as Administrator" to run the program.
3. Click Continue at the disclaimer screen.
4. Your firewall may alert you that RSIT is requesting Internet access. Please allow it.
5.Once it has finished, two logs will open: log.txt<-- this will be maximized and info.txt<-- this will be minimized.

Please post the contents of both logs (in separate post) in your next reply.

Report •

November 12, 2009 at 12:55:25
thanks.. your answer ..
ı have assumed ı arranged it ..ı delete it system 32 and regedit..and check it again ..there is no sign about it..
but to be sure ı apply your recommendation
my pc is vista and 32 bit..
ı run the rsist.exe and after ı apply all process you say me..
then two txt file appear (log.txt and info.txt) like you say me
and when ı close the txt files ..it dissapear and cant see on the desktop...
sorry ı wanna to know what is this rsist.exe what is happening and clean it the virus?..and you say about maximized and minimized ..what do we max.. and min..
ı asked only to learn ...ıf you reply me you make me happy..
thanks again your answer..

Report •

November 12, 2009 at 14:14:01
The RSIT.exe program is only an information tool to help see what programs are running and which one may interfere with virus/spyware removal tools. It has not removed any spyware, virus or anything else.

Navigate to c:\Rsit and open the folder. Both the info.txt and log.txt file are in that folder and can be copy/pasted from there.

Report •

Related Solutions

November 14, 2009 at 03:46:08
ok .. ı tried it lots of times..but ı couldn t send ..it is getting too long time..what ı must do ..how ı can send it to you..

Report •

November 14, 2009 at 16:52:55
Try running Malwarebytes.

Please download Malwarebytes' Anti-Malware from one of these sites:



Rename the setup file, mbam-setup.exe, before you download it. To do that once the "enter name of file to save to" box appears as the download begins in the filename box rename mbam-setup.exe to tool.exe> click save.

1. Double Click tool.exe to install the application.
2. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
3. If an update is found, it will download and install the latest version.
4. Once the program has loaded, select "Perform Quick Scan", then click Scan. The scan may take some time to finish,so please be patient.
5. When the scan is complete, click OK, then Show Results to view the results.
6. Make sure that everything found is checked, and click Remove Selected.
7. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.
8. The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
9. Copy&Paste the entire report in your next reply.

Report •

November 15, 2009 at 03:33:15
ok ..ı apply what you say me...and ı am glad with malwarebytes..thanks for it..

Malwarebytes' Anti-Malware 1.41
Veritabanı sürümü: 2775
Windows 6.0.6002 Service Pack 2

15.11.2009 13:34:41
mbam-log-2009-11-15 (13-34-41).txt

Tarama biçimi: Hızlı Tarama
Taranan öğeler: 84906
Geçen süre: 4 minute(s), 22 second(s)

Etkilenmiş Hafıza İşlemleri: 0
Etkilenmiş Hafıza Modülleri: 0
Etkilenmiş Kayıt Anahtarları: 0
Etkilenmiş Kayıt Değerleri: 0
Etkilenmiş Kayıt Verisi Öğeleri: 0
Etkilenmiş Klasörler: 0
Etkilenmiş Dosyalar: 0

Etkilenmiş Hafıza İşlemleri:
(Herhangi bir tehlikeli öğe bulunmadı)

Etkilenmiş Hafıza Modülleri:
(Herhangi bir tehlikeli öğe bulunmadı)

Etkilenmiş Kayıt Anahtarları:
(Herhangi bir tehlikeli öğe bulunmadı)

Etkilenmiş Kayıt Değerleri:
(Herhangi bir tehlikeli öğe bulunmadı)

Etkilenmiş Kayıt Verisi Öğeleri:
(Herhangi bir tehlikeli öğe bulunmadı)

Etkilenmiş Klasörler:
(Herhangi bir tehlikeli öğe bulunmadı)

Etkilenmiş Dosyalar:
(Herhangi bir tehlikeli öğe bulunmadı)

Report •

November 15, 2009 at 06:06:00
The malwarebytes scan looks clean, but I only read English. When you run Combofix your antivirus and any anti-spyware programs must be off or disabled. Also needs to be translated into English or I will not be able to read it.

Please download ComboFix to the desktop from one of the following links:


Link 2

Link 3

Rename the setup file, combofix.exe, before you download it. To do that once the "enter name of file to save to" box appears as the download begins in the filename box rename combofix.exe to to Combo-Fix> click save.
Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop.
If you are using Firefox, make sure that your download settings are as follows:
Tools->Options->Main tab
Set to "Always ask me where to Save the files".

Please do not rename Combofix to other names, but only to the one indicated.
Close any open browsers.
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
Click on This Link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
Close any open browsers.
WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
Double click on Combo-Fix.exe & follow the prompts.
Install the recovery console when asked.
When finished, it will produce a report for you.
Please post the "C:\Combo-Fix.txt" .
Note: Do not mouseclick combo-fix's window while it's running. That may cause it to hang.

Note: ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
Note: Combofix prevents autorun of ALL CDs, floppies and USB devices to assist with malware removal & increase security.

Please do not install any new programs or update anything unless told to do so while we are fixing your problem.

Report •

November 21, 2009 at 04:58:16
it is getting too time to answer you..so ım sorry..
but ı apply everything and in part C:\\ create a new folder that is like symbol "my computer" name is combofix and ı cant enter this file when ı double click it ..it goes my computer ..in local disk C and D:\ and also in C:\ create a new folder Qoobox and in it there is a file that catch me .log...what is it ...?and also there is test and test c and Quarantine last run and back env..what is that..ı did not understand anything...is everything ok..?

and also ı post the combofix my dektop..
and run it ..while ı run it ..there is a window that says me ..about avg..but ı uninstall avg before and ı dont use it...then ı m ok..rather it warn me ı say ok continue running ..and it is running then a window appear it seems like cmd window but it is blue...and something running ..and you say me you will see a report ..but any thing happen..ı wait but there is no report and ı looked for ..ı found catchme.log...in Qoobox folder ı said before...it is right file or not..

ı think something happened wrong..or all of my applications true and ı dont understand anything even ı did true ..
could you tell me please ..?
it is the catch me.log

-------- 2009-11-21 - 14:37:36 -------------
it is over...

Report •

Ask Question