Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Programs in %appdata%\Microsoft\Windows

27 Oct 2013   #1
andis59

Microsoft Windows 7 Ultimate 32-bit 7601 Multiprocessor Free Service Pack 1
 
 
Programs in %appdata%\Microsoft\Windows

I have just found two programs in my %appdata%\Microsoft\Windows directory
dmview.exe
wshom.exe

They are started at boot/login but I can't find from where...

Anyone knows what they are?

Should there ever be a program in %appdata%\Microsoft\Windows ?

// Anders


My System SpecsSystem Spec
.
27 Oct 2013   #2
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

Some clues would be nice - like the filenames? Duh! sorry.


Please downloadand install Malwarebytes Anti-malware(free version) from http://www.malwarebytes.org/products/malwarebytes_free/- UNtick 'Enable free trial of MBAM PRO' at the end of the installation - and update it, then run a full scan in your main account, and Quick scans in anyother user accounts.



Delete everythingit finds
My System SpecsSystem Spec
27 Oct 2013   #3
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

I do agree with Noel.
Could you please put what anti virus programs you have installed in your System Specs?
My System SpecsSystem Spec
.

27 Oct 2013   #4
andis59

Microsoft Windows 7 Ultimate 32-bit 7601 Multiprocessor Free Service Pack 1
 
 

I have added Microsoft Security Essentials to the System Spec.

I'm running Malwarebytes Anti-Malware as we speak. Been running for 3 hours now...

I ran Spybot - Search & Destroy and it couldn't find anything

I run MSE every night and it has not found anything


To my second question: Should there be any programs (*.exe) in the directory %appdata%\Microsoft\Windows or can I add a Local Security Policy disallowing programs to start from this directory?
My System SpecsSystem Spec
27 Oct 2013   #5
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

Some programs will legitimately run from this folder - I wouldn't block it completely.

A quick Google for wshom.exe shows that it may be part of a Trojan - dmview.exe may be an associated backdoor.
My System SpecsSystem Spec
27 Oct 2013   #6
andis59

Microsoft Windows 7 Ultimate 32-bit 7601 Multiprocessor Free Service Pack 1
 
 

At last the scan finished. Six and a half hours and 1267696 objects scanned...

It found this:

Folders Detected: 1
C:\Users\ame\AppData\Roaming\dclogs (Stolen.Data) -> Quarantined and deleted successfully.

Files Detected: 2
C:\Users\ame\AppData\Roaming\dclogs\2013-10-26-7.dc (Stolen.Data) -> Quarantined and deleted successfully.
C:\Users\ame\AppData\Roaming\dclogs\2013-10-27-1.dc (Stolen.Data) -> Quarantined and deleted successfully.

Nothing about dmview.exe or wshom.exe

Any ideas on how to proceed?
My System SpecsSystem Spec
27 Oct 2013   #7
andrew129260

Windows 10 Pro
 
 

My System SpecsSystem Spec
27 Oct 2013   #8
NoelDP

Microsoft Community Contributor Award Recipient

Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
 
 

I agree - there is enough ther to warrant further investigation.
My System SpecsSystem Spec
Reply

 Programs in %appdata%\Microsoft\Windows




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Restore APPDATA to default location fails; APPDATA deleted by mistake
PROBABLY EASIEST TO SKIP TO POST #3 for quick summary. @ Yard Dog has offered some help but feels this is over his head and asked other experts to step. Thanks for your help. ======= Older description - probably not necessary to read =========== During the process of setting up and installing...
Backup and Restore
Too many Microsoft programs need to know what ones to keep.
How do I know what frameworks are compatible w/ my Dell Inspiron windows 7 home premium 64bitt. I seem to have a few too many programs such as silver light, touch pack. I believe this and the need to download java is preventing my daughter from playing a game called Minecraft.
General Discussion
System Configuration shows AppData\Roaming\Microsoft\conhost.exe
I was removing some old, unnecessary programs from Startup and I noticed this "conhost" and was trying to find out if it was something I need on Startup. Upon further reading, I saw a few people say that "conhost" is trouble unless it's in the system folder. I went to...
System Security
How do I install Programs with appdata on seperate drives?
I have a SSD for my OS and major programs (i.e. antivirus, programming tools, or any program i feel has little writing usage). I would like to install any other write intensive programs (games and what not) on my HDD. With that being said, I do not want to move my entire user profile to the HDD, as...
Software
can i delete the files inside c:\Users\User\AppData\Local\Microsoft?
hi can i detele the files inside c:\Users\User\AppData\Local\Microsoft\Windows\WebCache\ i tried _http://www.justanswer.com/computer/5dl5x-c-users-user-app-data-local-microsoft-windows-files-contains.html but it doesn't clean them ,and ccleaner and the windows clean tool doesn't empty...
General Discussion
Win7 C:AppData and D:AppData cant access
Hi all. I just built a new system with win764. I took my old hard drive which also had win764 and hooked it up to transfer all my files over to the new system. Problem is if I go to D:\Users\MYUSER\Application Data its showing me the contents of
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 19:49.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App