Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.



Windows 7: Help identifying process

07 Apr 2012   #1

Windows 7 Home Premium 64 Bit
 
 
Help identifying process

Hi i'm paranoid i got a keylogger or malicious software in my computer for something i did, but the Antivirus did not detect anything wrong, also got recently Zemana antilogger just to be safe and seems everything is okay my question is:

found two processes i don't know what they are or what they do can you guys tell me if they are safe or dangerous? should i leave them or disable them? both are startup processes

hehkkhuf.exe > this one doesn't have description or anything it is located on C:\ProgramData\hehkkhuf.exe i googled and can't find the source it's strange the file is hidden can't find it where is located

csrss.exe > this one seems part of windows but i'm not sure

winlogon.exe > same as the one above

Help me please i'm paranoid

My System SpecsSystem Spec
.

07 Apr 2012   #2

ultimate 64 sp1
 
 

hi James661, and welcome to sevenforums,

csrss and winlogon are a part of windows - nothing to worry about there.

this hehkkhuf looks very suspect though - do disable it in msconfig, so it won't autostart at each boot, and also download and run the free version of malwarebytes to give your system a good clean.
My System SpecsSystem Spec
07 Apr 2012   #3

Windows 7 Home Premium 64 Bit
 
 

Quote   Quote: Originally Posted by mickey megabyte View Post
hi James661, and welcome to sevenforums,

csrss and winlogon are a part of windows - nothing to worry about there.

this hehkkhuf looks very suspect though - do disable it in msconfig, so it won't autostart at each boot, and also download and run the free version of malwarebytes to give your system a good clean.
I couldn't disable hehkkhuf at first it wouldn't let me then

I did what you told me and malwarebyte removed 2 files:

1- RiskwareTool
2- Trojan.Agent

minutes later the Norton Sonar removed the hehkkhuf.exe i restarted the computer and the file was gone completely so i think i fixed it still i'll be changing passwords of accounts just to be safe thanks

weird the Antivirus did not detect hehkkhuf yesterday when i got it last night and Zemana Antilogger did not detect suspicious activity so dunno what was that for..
My System SpecsSystem Spec
.


07 Apr 2012   #4

ultimate 64 sp1
 
 

happy to help
My System SpecsSystem Spec
Reply

 Help identifying process





Thread Tools



Similar help and support threads for2: Help identifying process
Thread Forum
open explorer, starts new process, close it, process remains active General Discussion
Windows 7 + Process Explorer + Patch: [Opening error process] Installation & Setup
Help identifying cable Hardware & Devices
Identifying USB 2.0 Ports Hardware & Devices
Identifying a Program Help Software
Need help identifying a Reg key Windows Updates & Activation
connection by the system process and killed process Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:32 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33