Program Name: cosbqew

File Name: C:\WINDOWS\cosbqew.exe

Description:

I don't know where this program came from. I found it on a friends computer.
What I noticed is that this file was created 2 weeks ago (probably came with some other piece of software).
I don't know what it does, or if it is useful or harmful.

I couldn't find this name on the startups list or on google.

It is started from:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

I found three entries there (and three corresponding entries in msconfig),
each of those entries was named after a non-existing file.


Remove:

After removing the entries from the registry, it simply added a new one.
First kill the process cosbqew.exe, then remove the funny looking entry from the registry (as mentioned, It has a wierd file name as the entrie's name),
and then remove the file from c:\windows.

I added a reboot before actually deleting the file, but I'm not sure if it is needed.

I hope I didn't delete a very importent file.

Thank you.

Thank you for your patience. If you still require help then we would ask that you

1/ post a fresh HijackThis log into this thread
2/ cut and paste the link of this thread into http://castlecops.com/postitle72668-0-0-.html

and someone will help you ASAP