A friend got a message from Avast that windowstime.exe was infected (Win32ropper-NAE [Drp) and it moved it to the vault. I've did some checking on the machine and it seems clean. Anyone ever heard of that particular file getting infected? Is it needed by windows? If so, how would you go about replacing it with a clean version? Thanks for any info.
Check here. Looks like an infector got infected. (...or something.)
Windows Time Keeper - windowstime.exe - Program Information
I think I would run MalwareBytes, then be sure that your registry is not screwed.
Thanks for the replies. Malwarebytes was fine, but before I flush the virus vault and delete it I was just wondering if it was something windows needed.
Last edited by ThrashZone; 11 Aug 2013 at 23:04.
Thanks, I couldn't really tell from the link whether it was something windows needed. I'll assume not and that it was just something malicious.
Please download (free version) Malwarebytes' Anti-Malware to your desktop
Malwarebytes : Malwarebytes Anti-Malware removes malware including viruses, spyware, worms and trojans, plus it protects your computer
* Double-click mbam-setup.exe and follow the prompts to install the program.Right click to run as Administrator, using Windows 7 or Vista.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad. Please save it to a convenient location. Copy and Paste that log into your next reply.
Thanks for offering. I did find some tarma thing and adobe air, but they were pup's so I didn't delete them. Not sure if I was supposed to.
Quote
