Does anyone know anything about this exe? It's in my app roaming file, when I delete it, it reappears and is eating resources and reaching out to IP addresses.
Attached is a screen shot of what its doing to my system, any help would be great.
Please use this tool to update your profile specs
And then use this tool to post all the files here
Please run Autoruns and then click on File> Save.. Save the file in .arn format and upload here. Will have a look
NosajAbihs
I have never heard about this virus. Use best antivirus to delete this
Try this solution may be it will help you
-Open that .exe file in notepad and delete everything and save the file.
-Now change the file status back to read only mode.
-so that the virus could not get access again
Best of luck
This ^ is really poor advice!
Please follow centaurs suggestion. In addition, you may also seek opinion by uploading the file to dedicated online virus scanners. Use this tutorial to help you with that:
Online Scanners - Scan Suspicious Files on your PC
Regards,
Golden
Right click to start Task Manager. In the processes, click on the bad file, then end the process.
Next, clean out all temporary files, don't reboot.
Now, Download AdWareCleaner AdwCleaner Download to your desktop
1.Right-click on adwcleaner.exe and select Run As Administrator to launch the application.
2.Click on Delete button.
3.Confirm each time with OK.
4.Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.
Check to see if the bad file has re-appeared in Task Manager process. If it has, end the process again.
I'd like you to scan your machine with ESET OnlineScan
- Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan- Click the
button.
- For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on
to download the ESET Smart Installer. Save it to your desktop.
- Double click on the
icon on your desktop.
- Check
- Click the
button.
- Accept any security warnings from your browser.
- Check
- Push the Start button.
- ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
- When the scan completes, push
- Push
, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
- Push the
button.
- Push
So I think I figured it out. I believe the exe above was tied to either Windows Defender or McAfee. I recently downloaded both in response to information from my ISP and sluggish performance from this pc. After uninstalling both and switching to Norton, the pabiyhf.exe disappeared or was stopped by Norton. Now I have cotuh.exe doing similar tasks yet when I shut down Norton, the cotuh.exe ends and doesn't start until I restart Norton. So its either part of Norton or a virus that only runs when Norton is on. Now I'm trying to figure out what igheh.exe is for and what Notekope is in my roaming apps data.
Holly crap !!!!
Somebody ... just shoot me in my head !!!!
It took you 2 days to come up with that answer ???
Have you followed Jacee's or Golden's suggestions?
Quote
