PDA

View Full Version : anyone heard of this file?


sick0
February 18th, 2004, 05:00 PM
anyone knows about this file? "gendel32.exe" about 52kb.
it just appear on my C:, i dont know what put it there.
there seems to be no problems on my pc though.
i scanned this using different AVs, ATs, online scan, spyware scan, etc.. nothing found

thanks

snowbound
February 18th, 2004, 05:08 PM
hi sicko :)

According to this link,

http://www.annoyances.org/exec/forum/win2000/r1076204161

it is a sex dialer. :o

U might want to follow the instructions here,

http://www.wilderssecurity.com/showthread.php?t=15913

and let one of the experts take a look at your HijackThis log.


Hope this helps.


snowbound

sick0
February 19th, 2004, 02:03 PM
thanks for the input. actually, i have already seen that link about a couple of months ago when i did a search for this file and it seems that only a few people encountered that file and very few sites came up with that search. i've looked myself into my hijackthis log but there seems to be nothing wrong with it, nothing suspicious. if it is really a dialer, i wonder why none detected it since its file creation dates back a year ago. i think its impossible that no one has a signature for it if it is really a malware.

well, nothing seems to be wrong with my system now so i guess i shouldnt be worrying too much about this file.

thanks again...

Marianna
February 19th, 2004, 02:31 PM
Well, according to this link:

http://www.chip.de/forum/thread.html?bwthreadid=488810&bwpage=2&bwsortorder=ascending

it seems GENDEL32.EXE is part of Installationssoftware "install-us" http://www.install-us.com)/ and is a "leftover".
As you look at %windir%\WININIT.INI youo will probably find:

[Rename]
nul=C:\gendel32.exe

Hope this helps ;)

sick0
February 19th, 2004, 03:41 PM
so i guess this isnt a malware after all, that explains why it isnt flagged by AVs, ATs or spyware apps.

thanks again

Marianna
February 19th, 2004, 03:43 PM
-{ Quote: " quoting: sick0 link=board=18;threadid=22254;start=0#msg133286 date=1077223278]
so i guess this isnt a malware after all, that explains why it isnt flagged by AVs, ATs or spyware apps.

thanks again
" }-

Right - is ONLY a "leftover" ;D

You're Welcome ;)

peartree
May 20th, 2004, 08:30 AM
-{ Quote: "anyone knows about this file? "gendel32.exe" about 52kb.
it just appear on my C:, i dont know what put it there.
there seems to be no problems on my pc though.
i scanned this using different AVs, ATs, online scan, spyware scan, etc.. nothing found

thanks" }-

Try the Panda Security online scanner. It found and cleaned the file (which it identified as a Trojan).