| View previous topic :: View next topic |
| Author |
Message |
glowingtadpole
Cadet
Joined: Feb 17, 2005
Posts: 2
Location: Canada
|
 Posted: Thu Feb 17, 2005 11:15 pm Post subject: spxew.exe & soltdown.exe |
|
|
I have a pc that is getting pop-ups when visiting a known safe/clean site in IE6 on XPsp1. I've run spybot with latest updates, and it didn't pick it up. I've run HJT, and most of the lines I am able to sort out, but two are unknown to me. I've searched the various startup and BHO lists, even google, and I can't find anything on these. Hopefully someone can help. I have the whole HJT log if you need it.
under "Running Processes"
C:\Windows\System32\spxew.exe
C:\Windows\System32\soltdown.exe
O4 - HKLM\..\Run: [57Ek3sQ] spxew.exe
O4 - HKCU\..\Run: [KwxqRicqh] soltdown.exe
When I checked the files, it shows the date modified as Feb 17/05.
Any help would be appreciated. Thanks,
Sheri
|
|
| Back to top |
|
 |
Robin
Site Admin
Phishing Squad Team Lead
Joined: Oct 15, 2003
Posts: 8924
|
|
| Back to top |
|
|
glowingtadpole
Cadet
Joined: Feb 17, 2005
Posts: 2
Location: Canada
|
| Posted: Fri Feb 18, 2005 7:03 pm Post subject: |
|
|
1. Ensure that your virus checker is up to date.
2. Scan your system
------------------------
Sorry, I should have included that information. The pc is running Norton AV, it is up to date, and the scan didn't find anything. I also (just) searched the Symantec virus library, and didn't find a reference to either of these.
Thx again, Sheri
|
|
| Back to top |
|
|
Robin
Site Admin
Phishing Squad Team Lead
Joined: Oct 15, 2003
Posts: 8924
|
| Posted: Tue Feb 22, 2005 7:05 pm Post subject: |
|
|
Sheri,
Please post a hijackthis log in the hijackthis forum if you haven't done so already. One of the site volunteers will help you in there.
|
|
| Back to top |
|
|
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
