A few dodgy programs have appeared on my computer lately... and I have no clue what they are or how they've got there... I have to post screen shots so don't bother me about double posting...

Sorry about this.... but that first one the filesize was too big so I had to cut out like, everything that wasn't too important...

There was one more dodgy program, the icon looked like something from Java Runtime... but I got rid of that one by pushing a random button in the uninstaller...



Yeah.. I did a virus scan last night... only caught one thing... So I'm gonna do one again when I leave for school... see if that gets anything...

It could have been some sort of spyware. Do a spyware scan too.

quote:

---

Originally posted by raceprouk
It could have been some sort of spyware. Do a spyware scan too.

---

post a screenshot of your current processes.

tbh that doesn't look as spyware or any type of malware (though looks can be deseaved, but in fact, it is very rare. If spyware is installed on your PC it most likely is not a program you can actually use but something which tries to be as invisible as possible).

It more looks like a (crappy) program to keep track of something (eg: how many times you've done something, eg: rebooting or whatever). Hence why it also would be "in use".

The program is also written with Unicode in mind, but seeing the output of it (all the question marks and some ascii characters) it has not been well written. (and I wouldn't be surprised if it was written in VB btw, seeing as those question marks is a typical look of how a bad programmed (incompatible) unicode code program in VB will look like)...

------------

The above is assuming the screenshot of the program screen is a screenshot from when you run the program...

On the other hand, if it is a screenshot from when you clicked on "change/remove" in your add remove programs control panel, then it looks like a validation screen of some sort (eg: like the Plus! sponsor validation screen when uninstalling). But again, for the unicode part, that would be the same explanation as above...

have you tried writing the number that appears in the white box and clicking ok?

quote:

---

Originally posted by bto
have you tried writing the number that appears in the white box and clicking ok?

---

logical order puts ok before cancel....

What SonicSam told me did help in the add-remove programs list... got rid of everything in there now... but in C:\program files\ there's still a program called huaci.... I have no clue what it is... but the same kinda box comes up like in sonicsams post... except now when I put the numbers in the text box and hit the bottom left option (okay option I'm assuming) this screen pops up...


That's when I click on the uninstaller in that folder.... the other file is "Mouse1.dll
     1.0.0.1
     (4 squares)"

Then the other folder in the main folder is called update.... Inside of it is a configuration settings file called sysadInfo.


The reason I think this is a virus is because when I restarted my computer last night it said I had a trojan... so I did a virus scan and got rid of it... But yeah...

Now that I look at the system processes... some of them do look a bit dodgy cause I've never seen them before...

First part of system process...

second part of processes

Reboot the computer into Safe Mode by Tapping F8. Then try to uninstall all the software and delete the folders.

http://shoutbox.menthix.net/attachment.php?pid=615748 see the highlighted one?

http://shoutbox.menthix.net/attachment.php?pid=615747 See the title on this one?

They match.

Alright... I started in safe mode and got rid of it... seems normal now.... Now just curious as to what these processes are for...

wuauclt.exe
NAVAPSVC.EXE

Process File: wuauclt or wuauclt.exe
Process Name: AutoUpdate for WindowsME

quote:

---

Originally posted by Stigmata
Process File: wuauclt or wuauclt.exe
Process Name: AutoUpdate for WindowsME

---

its not only for ME lol. XP has it also