B52bae97.exe

[samsonlonghair]

I went to my mother's house this weekend, and she asked me to take a look at her computer (of course) before I leave. I found a process running in Task Manager that I can't identify: B52bae97.exe. Whenever I try to end this process it simply restarts a few seconds later. An updated Norton Antivirus shows nothing; Spybot S&D shows nothing; Ad-aware shows nothing. I can't find anything about this process via altavista or google. If someone could offer any held I would appreciate it very much.

The OS: Win XP Service Pack 2
The Problem: B52bae97.exe

[Munsu]

Where is it running from? Installed anything lately?

[kippykinkel]

u can try searching for the location of the file on the computer. maybe that'll give some insight. if its hidden, make sure u adjust for that.

[Deadfire]

Well I tryed the following and various other windows related sites

http://www.exelib.com/
http://www.processlibrary.com/
http://www.trendmirco.com
http://www.what-process.com/

and get nothing

It's possible that its a fake process for reasons unknown to me, however the naming of the process may be related to a virus or spyware that may not have been discovered yet

[samsonlonghair]

Grrr. The frustration continues.

I hit F3 and got a few search results.
http://files.upl.silentwhisper.net/upload3/search.jpg
I booted into safe mode and deleted the ones in prefetch, but the one in system didn't want to go. Now there's a file there called b52aac91.exe; a process named b52aac91.exe is now running where the old one was. I think it's a new name everytime I restart windows.

I can't find any info on this anywhere. What do you guys think? Keylogger? Trojan?

[Munsu]

I think there's some site called hijackthis or something along those lines that are supposedly good at cleaning up your OS, so have a look there and see if they can help you.

[Assassin]

whatever it is, it doesn't seem to be a normal windows program. If Highjackthis doesn't get rid of it, then i suggest just formatting. Its a pain, but that mite be the only option left.

[BioAlien]

use Unlocker, to remove file that don't want to go.
http://ccollomb.free.fr/unlocker/

[darkmetal505]

HiJackThis: http://www.merijn.org/programs.php#hijackthis

However, do not delete anything you aren't sure of.

Run CleanUp: http://www.stevengould.org/software/cleanup/

and post your hijackthis log in www.geekstogo.com forums. They will tell you the specific steps you need to go through.