From Leo's mailbag:
> From: A Computer User
> Sent: January 17, 2007
> To: Ask Leo!
> Subject: Re: Ask Leo Question - unknown programs in process list
>
> Leo,
> I noticed that my PC has become slow. In an attempt to investigate I
> found a dubious looking process in the Task Manager. This process
> invariably shows memory usage 2060 K but every time the PC is
> restarted it changes its name and always comes from folder
> C:\WINNT\Temp. The name is invariably six characters (Upper case
> alphas only or upper case alphas combined with digits). Its size is
> 172,099 bytes and size on disk is 180,224. So far I have encountered
> the following names that yield no result if searched on the web.
>
> CZ2E08.EXE
> LUFDC0.EXE
> CNAF39.EXE
> PNEDE9.EXE
> TXD085.EXE
> MBEACF.EXE
> QX13E8.EXE
> VX5B81.EXE
> UNB638.EXE
> IX6928.EXE
> JE235F.EXE
> PN340C.EXE
> CX4B4B.EXE
>
> I have saved last four of the above *.EXE files (all identical) that I
> may send you if you so desire.
>
> Please advise about the problem and action to be taken.
It sounds like a classic case of a virus or spyware. I would make sure
that you're running an up-to-date anti-virus and anti-spyware checker -
most importantly making sure that the databases they use are also up to
date, and perform a scan.
Leo
Article 1476
| Category:
Viruses and Malware
