Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Dec 1st, 2008, 8:18pm
   Mischel Internet Security Forum
   Malware
   Trojans (Moderators: Helena, Gavin_Coe, Magnus)
   Dubious .exe files sign of malware?		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Dubious .exe files sign of malware?  (Read 430 times)
fatswede
Newbie
*



Trojans? whereīs Achilles when you need him!

   


Gender: male
 Posts: 5
Dubious .exe files sign of malware?
« on: Mar 25th, 2007, 5:38am »		 Quote Quote  Modify Modify
I am a novice (yet gratefull) user of Trojan Hunter. It cleaned up a trojan a couple of weeks ago, which had been bugging me.
 
Everytime I scan however (which is daily) I get a report on 2 .exe files, that canīt be scanned because they are in use by another application. The filenames appear nonsensical and change everytime I scan. Even two successive scans give different filenames. They usually consist of three random letters/numbers, caps and lower case, followed by .exe
 
- I tried to find them, but they just arenīt there on the specified location.
- I Googled several of them, but there were no hits at all.
- Trojan Hunter reports not finding any Trojans.
- McAfee reports finding a Malformed Archives bug (twice), but I read somewhere that that is a known bug in the program when running Virusscan and TH simultaniously.
- Spysweeper reports finding no spyware (save the usual  number of Cookies)
 
Here are the two lines from todays scanreport:
C:\DOCUME~1\***\LOCALS~1\Temp\Oo5.exe  Not scanned (in use by another application)
C:\DOCUME~1\***\LOCALS~1\Temp\tlP.exe  Not scanned (in use by another application)
 
The only other symptoms I experience from time to time are:
- computer sometimes is slow, appears to hang.  
- Occasionally MS Word (which I use as an email editor) keeps running in the background, after closing down Outlook. I have to shut it down manually in the running processes list.(Ofcourse this could simply be another MS Word bug we all know about and love to hate)
- THGuard sometimes displays an errormessage saying something along the lines of "unable to take snapshot of running processes.." (sorry, canīt remember the exact wording) this has happened about 5 times in the last month. At the time I was still running the evaluation version of TH. (Yes, I have registered since then!)
- Since a couple of weeks I canīt plan sweeps in Webroot SpySweeper, nor via Windows Taskmanager. The settings arenīt maintained. I submitted this problem to Webroot. Theyīre still considering it (I hope)
 
QUESTION:
Can anybody please advice whether I should be worried by the two unfindable and changing .exe files? and if so perhaps suggest a way to get rid of them...? Wink
 
System: XP, SP2, Office XP, Pent IV 3GHz, 1Gb RAM, McAfee Virusscan & Personal Firewall, SpySweeper, TrojanHunter (all latest versions and dat files), home-LAN through Router + firewall, DSL-line.
 
Thx! FS
 
IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4120
Re: Dubious .exe files sign of malware?
« Reply #1 on: Mar 25th, 2007, 6:02am »		 Quote Quote  Modify Modify
These files are temporary files created by TrojanHunter when it scans programs compressed with certain "packer" applications.  
 
Since McAfee incorrectly flags these files as "malformed archive" it also denies access to them, which is why you are seeing these error messages.  
 
You should ignore these messages as they are harmless, or you can temporarily disable McAfee while scanning with TrojanHunter.
IP Logged
fatswede
Newbie
*



Trojans? whereīs Achilles when you need him!

   


Gender: male
 Posts: 5
Re: Dubious .exe files sign of malware?
« Reply #2 on: Mar 25th, 2007, 6:49am »		 Quote Quote  Modify Modify
Thx for the speedy reply!
 
Just so that I understand correctly: the  2 .exe files I encounter are TH temporary files which Macafee interprets as Trojan Malformed Archives?
 
Phew thatīs a relief!
 
Thanks, so glad I wonīt have to completely dissect and reassemble my system, which isnīt my strong suit!
 
rgds,
FS
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: Dubious .exe files sign of malware?
« Reply #3 on: Mar 25th, 2007, 10:54am »		 Quote Quote  Modify Modify
Your system slowdown could very well be one or more of the active Shields in SpySweeper.  You might try turning off all the shields in SpySweeper and see if your system acts better.  Then enable them one at a time to see which one is causing a problem.  
 
I know of several SS users who have had problems with certain of its shields.
 
Some SS info can be found at the CastleCops forum
 
http://www.castlecops.com/f163-Spysweeper.html
« Last Edit: Mar 25th, 2007, 10:57am by siliconman01 » IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
fatswede
Newbie
*



Trojans? whereīs Achilles when you need him!

   


Gender: male
 Posts: 5
Re: Dubious .exe files sign of malware?
« Reply #4 on: Mar 25th, 2007, 11:10am »		 Quote Quote  Modify Modify
Thanks so much!
Iīll try it out.
rgds FS
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register