quote:
Originally posted by lavey92
Should I post a screen-shot of all my processes?
Absolutely.
But
1) Make sure you enlarge the columns widths so the entire entry names can be seen!!
2) Also enable the columns '
Username' and '
Image Path Name'. You can do this in the menu '
View' > '
Select columns...' (or see
here for instructions)
3) Sort the list on 'Username' (click on its column header)
----------
In regards to hvex.exe:
After some quick checking I can say that hvex.exe is a malware for sure. It is created in Visual Basic 6 as I suspected before.
It probably copies itself with random names. But there is one file which it uses which is always the same name: Bff17DCdk0.log
This is one of the files created by hvex.exe. However, it is not a textual log file like the name might let you think, it is actually a DLL file used by hvex.exe (maybe a copy of itself?). So, remove this file too.
hvex.exe also does some things in your Temporary Windows Files (TEMP). Probably copying itself to here in order to monitor itself.
/ 
