Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: I have a strange process

31 Dec 2009   #11
drazenn

Windows 7 Ultimate x64
 
 

I would suggest deleting withou thinking about it twice.
I would be dumb(and every body else too) if you even think about believing that process with name such abcdbcdefgabc.exe could be legit process.
Try to remember did you visit one of the "black" sites(maybe unintentionally) with keygens,cracked apps,etc.,cause I remember that I get process named abcd.exe once,from that kind of site.


My System SpecsSystem Spec
.
31 Dec 2009   #12
TaraSWinTeam

Windows 7
 
 

Make sure you are keeping up security to prevent malware: Security checklist for Windows 7.

Cheers,
Tara
Windows Outreach Team
My System SpecsSystem Spec
31 Dec 2009   #13
McSeven

W7 Prof 64 bit
 
 

Quote   Quote: Originally Posted by Jacee View Post
I would suggest running Malwarebytes' Anti-Malware, just to make sure you got all the malware off your machine.
Chances are, this file didn't come by itself.

download Malwarebytes' Anti-Malware to your desktop
|MG| Malwarebytes Anti-Malware 1.43 Download
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.

Ok, I ran it and it found the following ...

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChange s (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

But I don't know what it really means.
My System SpecsSystem Spec
.

31 Dec 2009   #14
Dinesh

Windows® 8 Pro (64-bit)
 
 

Quote   Quote: Originally Posted by McSeven View Post
Quote   Quote: Originally Posted by Jacee View Post
I would suggest running Malwarebytes' Anti-Malware, just to make sure you got all the malware off your machine.
Chances are, this file didn't come by itself.

download Malwarebytes' Anti-Malware to your desktop
|MG| Malwarebytes Anti-Malware 1.43 Download
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.

Ok, I ran it and it found the following ...

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChange s (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

But I don't know what it really means.
Your system is clean
My System SpecsSystem Spec
31 Dec 2009   #15
McSeven

W7 Prof 64 bit
 
 

Ok, I guess all is well for now, so I thank everyone's help!
My System SpecsSystem Spec
31 Dec 2009   #16
jav

Windows 7 Ultimate x86 SP1
 
 

Quote   Quote: Originally Posted by McSeven View Post

Ok, I ran it and it found the following ...

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChange s (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

But I don't know what it really means.
Don't worry, false Positive.
more info: (Hijack.DisplayProperties) - Malwarebytes Forum

Quote   Quote: Originally Posted by Malwarebytes Staff
Hello

It is not an actual infection, but instead a non-default setting that is often altered by actual infections, however, in Windows Vista and Windows 7 Microsoft changed the default setting to the opposite of what it was in XP so on Vista and Windows 7 systems (such as your own) this detection should be ignored .

If you need anything else please post.

Thanks
McSeven From your log I can see that it was quarantined and deleted. You should fix it as it's Windows native component.
And then run quick scan and when it finds it tell it to ignore it.

How to fix it: (Hijack.DisplayProperties) - Malwarebytes Forum
My System SpecsSystem Spec
31 Dec 2009   #17
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

It looks to be clean ... set a fresh restore point, so you don't accidently go back to the bad one.

System Restore Point Shortcut
My System SpecsSystem Spec
Reply

 I have a strange process




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Strange processes on my process list
Hello. First, I don't know is it right forum for this question. If not, please move my thread to other forum. I was not looking at this list and today I did it for no reason and noticed something that I'm not sure about. 1. hyoidragaslope.exe. User name that run this process : System ...
System Security
Possible strange network activity in Process Hacker?
I use Process Hacker as a task manager replacement and I sometimes glance at the “Network” tab. Last week when I was looking at the “Network” tab, I saw a weird website under the “Local Address” column that I’ve never seen before: traffic.acwebconnecting com Honestly, I cannot recall...
System Security
open explorer, starts new process, close it, process remains active
Hi, I've got a quicklaunch shortcut to: %windir%\explorer.exe shell:::{323CA680-C24D-4099-B94D-446DD2D7249E} That takes me straight to my explorer favourites. What I notice is that when I launch that, I get a new explorer.exe thread appear in the task manager. When I close it though, that...
General Discussion
Windows 7 + Process Explorer + Patch: [Opening error process]
Hi fooks, I hope you all can read this, i'm from Belgium so my Englsich is not as good as it might be. I have bought last year a little notebook with Windows 7 Home Premium on it. On this machine i am the Administrator, and there are no other people on that, or guestaccounts made. On...
Installation & Setup
Strange Task Manager Process Names
I have Windows 7 64 bit OS. However, under task manager the processes are showing: iexplore.exe*32, itumes.exe*32, etc. I've never seen this before. My computer is running slower, and has frozen a few times since I first saw this. Don't know if this could be causing a problem. Any help would...
General Discussion
BOOT process - strange lag before F8
Hi, I've encountered a strange problem. After switching on or rebooting PC, the POST screen shows up. Prints all the info about PC, drives, additional controllers. Right after that, it should find the boot drive, the boot partition and start booting, but there is a certain lag that bugs me....
Performance & Maintenance


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 10:37.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App