PDA

View Full Version : dh>2:@.exe - Weird process showing up


The.Terminator
March 25th, 2005, 06:25 AM
One PC in our company has a weird process running on his PC.
The process is called dh>2:@.exe (see attachment).

It's killable but re-appears after some time.
We ran a spyware checker and removed the spyware, also searching on the filename gives no result because Windows (Windows2000, SP4 and patching with the latest security patches) sees the > sign as command instead of string.

The PC doesn't behave strange (in other words, the user doesn't sees anything) however we don't know if it's doing something 'underwater'

Also other clues what we can run / do ?

TIA

Infinity
March 25th, 2005, 07:18 AM
download adaware, spybot and m$ antispyware.

let them update and reboot into safe mode.

then run the three apps with your antivirus.

in safe mode delete your temps, internet temps and downloaded program files (windows folder)

reboot and see if it gone.

Inf.

BlueZannetti
March 25th, 2005, 07:33 AM
Also download ProcessExplorer (http://www.sysinternals.com/ntw2k/freeware/procexp.shtml) and set the view to show the image path and command line (View>Select Columns>Process Image tab, check Image Path and Command Line). Before doing this, also empty out all temporary folders (the executable may be run from one of them).

Blue