1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

unknown services 'D', 'YVMJYK'

Discussion in 'Malware and Virus Removal Archive' started by marty, 2005/07/08.

Thread Status:
Not open for further replies.
  1. 2005/07/08
    marty

    marty Inactive Thread Starter

    Joined:
    2002/01/20
    Messages:
    233
    Likes Received:
    0
    I've noticed two services, 'D' and 'YVMJYK' on my XP home ed. machine. Have disabled both - here are their locations from the services' properties:

    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\D.exe

    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\YVMJYK.exe

    Neither exist at present, but I'd also like to be able to remove them from the list of services. How can I?

    Marty
     
  2. 2005/07/08
    Welshjim

    Welshjim Inactive

    Joined:
    2002/01/07
    Messages:
    5,643
    Likes Received:
    0
    Several references to d.exe being a trojan (or being an autodialer, which could be making long distance calls without your knowledge). Cannot find anything on YVMJYK.exe.
    Assume you have an antivirus program installed, set to AutoProtect (run on boot) and that you update virus definitions frequently.
    If not, suggest you do. You could run an online antivirus scan
    http://housecall.trendmicro.com/housecall/start_corp.asp
    and trojan scan
    http://www.windowsecurity.com/trojanscan/trojanscan.asp
    If these programs do not find the trojan and delete these items, suggest you follow this procedure
    http://www.windowsbbs.com/showthread.php?t=37074
     

  3. to hide this advert.

  4. 2005/07/09
    marty

    marty Inactive Thread Starter

    Joined:
    2002/01/20
    Messages:
    233
    Likes Received:
    0
    Is it possible for me to manually delete these two services? Also is there a definitive list by MS of available services for XP home? I realize that services may also be non-MS in origin but this would be a good start.

    Marty
     
  5. 2005/07/09
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
  6. 2005/07/09
    Welshjim

    Welshjim Inactive

    Joined:
    2002/01/07
    Messages:
    5,643
    Likes Received:
    0
    marty--If the two .exe files you mention are malware, just deleting them is unlikely to delete the underlying cause--some spyware installed on your PC. That is what the various programs in my links are meant to find and uninstall.
    (It is, however, possibly a good sign that whatever you did to "disable" the .exe files has not resulted in a reappearance of the .exe files themselves. Spyware often does that.)
    What makes you think they are Services or have anything to do with Services?
    (For the record, here are two discussions of WinXP Services
    http://www.microsoft.com/resources/.../proddocs/en-us/sys_srv_default_settings.mspx
    http://www.theeldergeek.com/services_guide.htm
    However, I cannot recommend that you make any changes unless you are absolutely sure you know what you are doing and why.)
     
  7. 2005/07/11
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\D.exe

    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\YVMJYK.exe

    I have never known something like those to be alone.

    Just curious here, that folder leads me to believe it is the C:\Documents and Settings\Administrator\* folders. The only way known to me to login onto that account in XP Home is in Safe Mode. Something new or maybe Pro here?
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.