Good day people,
On checking my services recently I came across this item "COSXBEMI". Has anyone come across this before? For safety's sake I have disabled it but if there is anyone out there who is familiar with this item please get back to me.
A quick Bing search reveals this thread is the only place where that name appears! I would run a few security sweeps just to make sure you didn't get hit with something if you didn't just add some new program on lately.
Definitely run a few security sweeps but also under the Services Window you can check the properties of it and check the "Path to executable" which may help determine if it's part of an application that you can investigate further. If it's svchost.exe I would have my concerns.
Usually you can tell if it has "SYSTEM" or user account name seen next to it in the processes tab when going down the list there. I think I'll try a few other search engines as well to see if I simply end up right back here again since this is an odd one!
bleepingcomputer.com does not see it as a start up program http://goo.gl/cDpd
download sysinternals autoruns and see if it pops up in services http://goo.gl/jDAcp
Hi Duzzy the path in question is this C:\Users\*******~1\AppData\Local\Temp\COSXBEMI.exe. I will give the folder in question a thorough check. Incidentally I checked the sys with MWB, Hitman Pro, Kasp TDSSKiller Avira etc none of them highlighted it as malware. After I have dug it up I will get back to you to close this. Thanks for your help troops. Ich
Good point! Another variation leaves both the "X" and "B" out of the equation entirely for the search results found. Try "COSEMI" as the end result. Or Cosemi Technologies for example for Optical components, light sensitive devices, etc. That was just one of several corporations with the same name soelling.
That was found when expanding to international as well as just about every other search engine where must did just what I suspected pointed back to the thread here.
Quote