Please Help!

Discussion in 'malware problems & news' started by cet, Jan 19, 2008.

Thread Status:
Not open for further replies.
  1. cet

    cet Registered Member

    Joined:
    Sep 3, 2006
    Posts:
    876
    Location:
    Turkey/İzmir
    I run hijack this once a week.Today I saw two services with missing files.First I disabled them and afterwards I deleted them using Glary utilities.Can they be the sign of a rootkit?
    two services were:
    O23 - Service: EHLKNV - Unknown owner - C:\DOCUME~1\CEYLAN~1\LOCALS~1\Temp\EHLKNV.exe (file missing)
    O23 - Service: WFMBWA - Unknown owner - C:\DOCUME~1\CEYLAN~1\LOCALS~1\Temp\WFMBWA.exe (file missing)
    I could not find anything about those on the web.Please help.:oops:
     
    cet, Jan 19, 2008
    #1
  2. Cretemonster

    Cretemonster Registered Member

    Joined:
    Mar 31, 2005
    Posts:
    79
    Looks like leftovers from running Rootkit Revealer??
     
    Cretemonster, Jan 21, 2008
    #2
  3. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands
    cet,

    Please read this and hop over to one of the recommend HJT-forums and have your system checked over there.

    Best of luck!

    regards,

    paul
     
    Paul Wilders, Jan 22, 2008
    #3
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...