After checking the forums that I've been using to try to solve this issue last night, I made a final attempt to try to solve...
I got this reply in another forum:
> "xmdm.exe" (aka "Hacktool.DoS" [NAV] aka "Jolt" or "XDooR 1.5" - not sure > here - [author]) looks like an...
Nope, I haven't tried that. I'll do that and post what I find.
dsl: Ok, I'll try that forum as well.
Gavin: The problem is that I can't find the file. I.E when I search/look in the directory where...
xmdm.exe is not found in the registry
Since the xmdm.exe keeps getting launched everytime I restart the computer I removed every entry from the startup list from...
I've got the settings to show me both hidden and systemfiles.
Cant find it though.
Doh! Sorry about this.
PID: 144 ( 8) \SystemRoot\System32\smss.exe
The preview adds a smiley even though I've Checked the checkbox that...
Didn't want that to be a cool smiley. It's suppose to look like this
PID: 188 ( 144) \??\C:\WINNT\system32\winlogon.exe
Oh almost forgot the logs from Spybot. This is what it looks like when I've restarted the computer
Spybot-S&D Startup list report, 2003-06-06...
I've installed Search & Destroy 1.2 and it doesn't find bots.
Both Vision and Active Ports shows that...
Ok, Pieter and CrazyM I'll try that when I get back from work.
I printed the ZA-log from this morning but it doesn't help me much.
ZA log is spammed with xmdm outgoing attempts on different ipnumber on port 53, 70 and 8426. Pulling the cable now, will check the forum from work.
First netstat -na shows port 1026 - 1383 listening
Next one shows 1026-1492
Bad news, xmdm.exe showed up again this morning. :(
What can I do?
Sorry Pieter if the log wasnt interesting ;)
I was somewhat suprised when I got back from work today. The ZA-log was scary,...
Ok here's the log
Logfile of HijackThis v1.94.0
Scan saved at 19:22:04, on 2003-06-05
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
I scanned my computer with TDS, removed a suspicious file and checked the logs before I went to sleep last night and I saw no attempts...
I've installed TDS, manually downloaded the databasefile and chose full system scan under system testing. It said that it found a strange...
The problem is that I can't find the file. When I search for it it's gone.
I used that scanner and it found nothing.
When I check the log in ZoneAlarm I see that it does about 20 attempts every 2 minutes.
I'll try that scanner and let you know if it finds anything.
Wished one scanner would be enough though ;)
I've recently installed ZoneAlarm and noticed that an application called xmdm.exe tries to access the internet. Since I didn't have a clue...
Separate names with a comma.