Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Jul 20th, 2008, 1:06am
   Mischel Internet Security Forum
   Malware
   Adware, Browser Hijackers and other Malware (Moderators: Helena, Gavin_Coe, Magnus)
   mom.exe?		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: mom.exe?  (Read 4558 times)
dextermeth
Newbie
*





   


Posts: 3
mom.exe?
« on: Apr 27th, 2007, 10:49am »		 Quote Quote  Modify Modify
I just noticed today that I have a new process running that I didn't notice before. MOM.EXE
 
A quick search wielded this:
http://www.symantec.com/smb/security_response/writeup.jsp?docid=2006-021 614-3013-99&tabid=2
 
However, I don't have any of the associated folders nor registry keys listed there. So I started to dig a little deeper and found that ATI Catalyst has this in their folder also. WHich is where mine is located.  
 
But heres the part that makes me nervous... Yesterday in a moment of sheer stupidity I downloaded and ran this:
 
http://www.wowglider.com/InstallEx/Launchpad.exe
 
I then ran the updater, but did not add any more info (it was asking for username and password via Sony Launchpad, which was really odd)
 
Anyway, I was hoping maybe someone could offer some advice. Trojanhunter found nothing, Avast found nothing, Spybot found nothing either... But you'll notice on the Symantec page that the keylogger/screenshot taking is related to World of Warcraft, and so is wowglider... Hence my nervousness.  
 
Thanks in advance
IP Logged
doubledown
Full Member
***





   


Posts: 144
Re: mom.exe?
« Reply #1 on: Apr 27th, 2007, 11:34am »		 Quote Quote  Modify Modify
If you can locate the actual mom.exe file I'm sure the good folks here would be able to analyse it for you and would appreciate you submitting it to them - the procedure to do this is described in the FAQ section of this forum on the following link -  
 
http://www.misec.net/forum/board/FAQ/1139308293
 
hth
IP Logged
dextermeth
Newbie
*





   


Posts: 3
Re: mom.exe?
« Reply #2 on: Apr 27th, 2007, 12:06pm »		 Quote Quote  Modify Modify
Submitted. Thanks.  
 
 
I was thinking that maybe someone with the skills to run the files I linked too, might want to check there too. Simply because the MOM.EXE file I submitted, may not be the only issue. That launchpad.exe from the website file might be bad news also.  
 
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5516
Re: mom.exe?
« Reply #3 on: Apr 27th, 2007, 12:15pm »		 Quote Quote  Modify Modify
Submit Launchpad.exe as well.  Gavin will analyze it for us.   Wink
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
dextermeth
Newbie
*





   


Posts: 3
Re: mom.exe?
« Reply #4 on: Apr 27th, 2007, 3:41pm »		 Quote Quote  Modify Modify
Yeah, I actually said "doh" out loud after posting and emailed it to him already. Tongue
 
Thanks for the help. Curious to see what he finds, if anything.
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register