1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Unknown program

Discussion in 'Security and Privacy' started by Old_Git, 2003/01/17.

Thread Status:
Not open for further replies.
  1. 2003/01/17
    Old_Git

    Old_Git Inactive Thread Starter

    Joined:
    2003/01/17
    Messages:
    3
    Likes Received:
    0
    I have a program running on my computer that appears on my firewall but I think it may be an intruder. It is called HTJJ.exe and will not allow itself to be de-activated or deleted. Any ideas?
    Thanks
     
  2. 2003/01/17
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    Locate the exe file, rt click it and view it's properties.
     

  3. to hide this advert.

  4. 2003/01/17
    Old_Git

    Old_Git Inactive Thread Starter

    Joined:
    2003/01/17
    Messages:
    3
    Likes Received:
    0
    Thanks, I did that but it only tells me that it was created last November, not a time when I was installing anything new, and that it's in C;\WINDOWS\SYSTEM ........ leaves me none the wiser, and it doesnt appear to be on either of my other p.c.s :confused:
     
  5. 2003/01/17
    Welshjim

    Welshjim Inactive

    Joined:
    2002/01/07
    Messages:
    5,643
    Likes Received:
    0
    Old_Git--Are you sure about the name of that file? Neither Yahoo nor Google had anything on HTJJ.exe.
     
  6. 2003/01/17
    brett

    brett Inactive Alumni

    Joined:
    2002/01/11
    Messages:
    2,058
    Likes Received:
    0
    I take it that you have run a virus scan? Some trojans, such as Subseven, do use random names (hence the reason for no Google hits?).
     
  7. 2003/01/17
    Zephyr

    Zephyr Inactive

    Joined:
    2002/01/21
    Messages:
    1,519
    Likes Received:
    0
    I found this:

    @@BEGIN NCM HEADERS
    Version: 0.9
    Issuer: annihilator-1@erlenstar.demon.co.uk
    Type: spam
    Action: hide
    Hierarchies: 1alt
    Notice-ID: binspam.200109132348.006
    Count: 1
    @@BEGIN NCM BODY
    # telusplanet.net 161.184.80.192 SpKp/wNdaTRUmpZB37RAjA== 864/3 htjj.exe
    <01f72eb4.d7d69f13@@randhost> 1alt.binaries.pictures.erotica.bondage.male
    @@END NCM BODY

    Perhaps you have some malware try to use your computer to propagate spam. Run Spybot and see what gives.

    Then do a full AV and Trojan scan using some on-line program since your may be subject to duping by this bug.

    You can also boot to a dos session and delete the critter but I would suggest that you merely rename it (htjj.old) in case it's actually a good guy. This method may cause an error upon boot but that will have some info as to whats calling this executable.

    Also look in msconfig to see if it's listed in start-ups.
     
    Last edited: 2003/01/17
  8. 2003/01/17
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    You could also try to open the exe in notepad or wordpad, sometimes there will be some visible text that may give a clue...
     
  9. 2003/01/18
    Old_Git

    Old_Git Inactive Thread Starter

    Joined:
    2003/01/17
    Messages:
    3
    Likes Received:
    0
    Thanks

    Thanks for your help, People, I've a bit to be going on with here, I'll let you know how it goes
    Git
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.