PDA

View Full Version : Strange Services qbut mwma vgkeeaa



oneforall
2006-04-24, 22:35
I've found qbut mwma vgkeeaa (all files with *.exe) in my service list. Theire location should be admin/local settings/temp. but the folder is erased on every boot.

Can you help me?

oneforall
2006-04-24, 23:35
resolved!

it seems to be junk from the rootkitrevealer.

tashi
2006-04-25, 00:30
Would you like to post a log to see if there is anything remiss?


Open SpyBot, check for and get any updates available.
Close all browsers, check for problems and fix everything found in red
Then on the toolbar menu select mode and switch to advanced mode, on the left lower down select tools, and view report, ensure all the options are selected near the bottom except

Uncheck[ ] do not report disabled or known legitimate Items.
uncheck[ ] Include a list of services in report.
Uncheck[ ] Include uninstall list in report.

Now select (near the top) view report.
Press export in the save in box choose a place such as your my documents folder, then in your next post near the bottom select the "browse" button; navigate to and attach or post that report.

oneforall
2006-04-25, 00:48
Ok,

here it is:

But if you are looking for illegal servives why then uncheck[ ] Include a list of services in report?

Thanks

PS: Has the attachment arrived???

LonnyRJones
2006-04-25, 01:27
No Attachment ?

Any problems besides what the topic was started for ?

oneforall
2006-04-25, 08:42
No Attachment ?

Any problems besides what the topic was started for ?

No, not one problem.

If you like, take a look into the report file above.

"File Size was to long for the forum."

Now it is there.

LonnyRJones
2006-04-25, 13:03
Looks fine

Good job finding out what they were and taking care of rootkitrevealer leftovers.

oneforall
2006-04-25, 13:07
The German Nlite forum was faster.

Take a look at the thread.

http://www.german-nlite.de/index.php?showtopic=4120

Thanks again!