1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Identify this Program

Discussion in 'Malware and Virus Removal Archive' started by whompuscat, 2005/12/30.

  1. 2005/12/30
    whompuscat Lifetime Subscription

    whompuscat Inactive Thread Starter

    Joined:
    2002/03/30
    Messages:
    341
    Likes Received:
    0
    Can anyone please tell me what this program is C:\Program Files\Xttwl\Qwuaxuf.exe ??? It shows up in my HiJack This log and I have no idea what it is and a search on the net doesn't come up with anything.
     
  2. 2005/12/30
    McTavish

    McTavish Inactive

    Joined:
    2005/06/24
    Messages:
    576
    Likes Received:
    1
    A lot of malware can generate random names for itself so that it is unique to your computer, so you won’t find any references to it on the net. If it was a known process you would find it. Is there a process running on your machine with that name? If so try ending it with task manager "“ Ctrl+Alt+Del.

    You can then try removing it with HJT but it may well reappear on reboot - maybe with a different name. You need to update your definitions and run a full anti-virus/spyware scan on your system.
     

  3. to hide this advert.

  4. 2006/01/03
    charlesvar

    charlesvar Inactive Alumni

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Hello whompuscat,

    If you still haven't found the answer, post your HJT log.

    Is there a BHO associated with it? One way to find info would be thru CLSID #'s.

    Regards - Charles
     
  5. 2006/01/03
    oshwyn5

    oshwyn5 Inactive

    Joined:
    2005/08/25
    Messages:
    736
    Likes Received:
    0
    Locate it, (use explorer to go to C:\Program Files\Xttwl\Qwuaxuf.exe) right click and select properties.
    it should have a name and vendor listed.
    But generally random names like that tend to be trojans.
    I recommend A squared
    http://www.emsisoft.com/en/software/free/
     
  6. 2006/01/03
    whompuscat Lifetime Subscription

    whompuscat Inactive Thread Starter

    Joined:
    2002/03/30
    Messages:
    341
    Likes Received:
    0
    No it was not listed as a BHO in the HJT log. I am actually working on this for a friend.
    It is not listed in her add/remove file, so I suggested that she disable it through msconfig, which she did and everything worked fine until she tried to shut down her computer, it froze. Nothing would work until she enabled it again.
    When right clicked, there is nothing in properties, not even a created or modified date.
    I have given her the link to A-Square and she will try that, thanks for the link, seems like a good program to have on hand so I will also d/l for my use.
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.