Results 1 to 9 of 9

Thread: B52bae97.exe

  1. Sun, 08-27-2006, 05:34 PM #1
    samsonlonghair
    samsonlonghair is offline
    Jounin samsonlonghair's Avatar
    Join Date
    Aug 2003
    Location
    Halloween Town
    Age
    39
    Posts
    961

    B52bae97.exe

    I went to my mother's house this weekend, and she asked me to take a look at her computer (of course) before I leave. I found a process running in Task Manager that I can't identify: B52bae97.exe. Whenever I try to end this process it simply restarts a few seconds later. An updated Norton Antivirus shows nothing; Spybot S&D shows nothing; Ad-aware shows nothing. I can't find anything about this process via altavista or google. If someone could offer any held I would appreciate it very much.

    The OS: Win XP Service Pack 2
    The Problem: B52bae97.exe
    "Samsonlonghair - The Defender of the Oppressed And Shunned!" -Kraco
    Reply With Quote Reply With Quote
  2. Sun, 08-27-2006, 07:08 PM #2
    Munsu
    Munsu is offline
    Jack Bauer Munsu's Avatar
    Join Date
    Aug 2003
    Age
    40
    Posts
    13,535
    Where is it running from? Installed anything lately?
    Reply With Quote Reply With Quote
  3. Sun, 08-27-2006, 08:26 PM #3
    kippykinkel
    kippykinkel is offline
    Student
    Join Date
    Apr 2006
    Posts
    38
    u can try searching for the location of the file on the computer. maybe that'll give some insight. if its hidden, make sure u adjust for that.
    Reply With Quote Reply With Quote
  4. Sun, 08-27-2006, 08:34 PM #4
    Deadfire
    Deadfire is offline
    If I could change my name
    to Saberfire... I would     Deadfire's Avatar
    Join Date
    Sep 2005
    Location
    Canada
    Posts
    1,263
    Well I tryed the following and various other windows related sites

    http://www.exelib.com/
    http://www.processlibrary.com/
    http://www.trendmirco.com
    http://www.what-process.com/

    and get nothing

    It's possible that its a fake process for reasons unknown to me, however the naming of the process may be related to a virus or spyware that may not have been discovered yet
    image fail!
    Reply With Quote Reply With Quote
  5. Fri, 09-01-2006, 09:47 AM #5
    samsonlonghair
    samsonlonghair is offline
    Jounin samsonlonghair's Avatar
    Join Date
    Aug 2003
    Location
    Halloween Town
    Age
    39
    Posts
    961
    Grrr. The frustration continues.

    I hit F3 and got a few search results.

    I booted into safe mode and deleted the ones in prefetch, but the one in system didn't want to go. Now there's a file there called b52aac91.exe; a process named b52aac91.exe is now running where the old one was. I think it's a new name everytime I restart windows.

    I can't find any info on this anywhere. What do you guys think? Keylogger? Trojan?
    "Samsonlonghair - The Defender of the Oppressed And Shunned!" -Kraco
    Reply With Quote Reply With Quote
  6. Fri, 09-01-2006, 10:04 AM #6
    Munsu
    Munsu is offline
    Jack Bauer Munsu's Avatar
    Join Date
    Aug 2003
    Age
    40
    Posts
    13,535
    I think there's some site called hijackthis or something along those lines that are supposedly good at cleaning up your OS, so have a look there and see if they can help you.
    Last edited by Munsu; Fri, 09-01-2006 at 03:49 PM.
    Reply With Quote Reply With Quote
  7. Fri, 09-01-2006, 03:46 PM #7
    Assassin
    Assassin is offline
    Moderator Assassin's Avatar
    Join Date
    Jul 2003
    Age
    38
    Posts
    3,513
    whatever it is, it doesn't seem to be a normal windows program. If Highjackthis doesn't get rid of it, then i suggest just formatting. Its a pain, but that mite be the only option left.
    Reply With Quote Reply With Quote
  8. Fri, 09-01-2006, 06:33 PM #8
    BioAlien
    BioAlien is offline
    Missing Nin BioAlien's Avatar
    Join Date
    Aug 2005
    Location
    Too darn lazy to login, so just lurking in the shadows instead.
    Age
    34
    Posts
    1,310
    use Unlocker, to remove file that don't want to go.
    http://ccollomb.free.fr/unlocker/
    Reply With Quote Reply With Quote
  9. Fri, 09-01-2006, 11:08 PM #9
    darkmetal505
    darkmetal505 is offline
    Awesome user with default custom title darkmetal505's Avatar
    Join Date
    Aug 2005
    Location
    Oklahoma City
    Age
    35
    Posts
    1,598
    HiJackThis: http://www.merijn.org/programs.php#hijackthis

    However, do not delete anything you aren't sure of.

    Run CleanUp: http://www.stevengould.org/software/cleanup/

    and post your hijackthis log in www.geekstogo.com forums. They will tell you the specific steps you need to go through.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules