Please Help!

Discussion in 'malware problems & news' started by cet, Jan 19, 2008.

Thread Status:
Not open for further replies.
  1. cet

    cet Registered Member

    Joined:
    Sep 3, 2006
    Posts:
    867
    Location:
    Turkey/İzmir
    I run hijack this once a week.Today I saw two services with missing files.First I disabled them and afterwards I deleted them using Glary utilities.Can they be the sign of a rootkit?
    two services were:
    O23 - Service: EHLKNV - Unknown owner - C:\DOCUME~1\CEYLAN~1\LOCALS~1\Temp\EHLKNV.exe (file missing)
    O23 - Service: WFMBWA - Unknown owner - C:\DOCUME~1\CEYLAN~1\LOCALS~1\Temp\WFMBWA.exe (file missing)
    I could not find anything about those on the web.Please help.:oops:
     
  2. Cretemonster

    Cretemonster Registered Member

    Joined:
    Mar 31, 2005
    Posts:
    79
    Looks like leftovers from running Rootkit Revealer??
     
  3. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    cet,

    Please read this and hop over to one of the recommend HJT-forums and have your system checked over there.

    Best of luck!

    regards,

    paul
     
Loading...
Thread Status:
Not open for further replies.