Unsolved
This post is more than 5 years old
1 Message
0
1577
September 18th, 2004 17:00
unknown process running and error sometimes on startup
I have an unknown process running,
comvga.exe. When I
try to end process it starts back up immediately. It is
not listed under start up programs under msconfig. My
system seems much slower since I noticed this process
running. Sometimes, when I restart I get an error that
says "Windows\windows update setup files/ mfcnut.exe" or
sometimes it ends in "webjpeg.exe" or "hardap.exe" and then says "sh*t
happens while copying to" and has the OK box to click or
you can x out in the corner box. With an error message
like that it seems like a virus maybe. I have ran my
virus scan (current updates) and also have Adware and
Spybot (current updates) and nothing has found it. I
also searched on the Internet and could find nothing
about it. One other note, I had something named REGSVR32
(all capital letters if that even matters) load onto my
Computer somehow one day when I was on line. It just
came up and said download complete when I never initiated
any download. I already had this on my computer but the
name in small letters (again, don't know if that matters
or not). I don't know if these are related or what. Any
suggestions?
try to end process it starts back up immediately. It is
not listed under start up programs under msconfig. My
system seems much slower since I noticed this process
running. Sometimes, when I restart I get an error that
says "Windows\windows update setup files/ mfcnut.exe" or
sometimes it ends in "webjpeg.exe" or "hardap.exe" and then says "sh*t
happens while copying to" and has the OK box to click or
you can x out in the corner box. With an error message
like that it seems like a virus maybe. I have ran my
virus scan (current updates) and also have Adware and
Spybot (current updates) and nothing has found it. I
also searched on the Internet and could find nothing
about it. One other note, I had something named REGSVR32
(all capital letters if that even matters) load onto my
Computer somehow one day when I was on line. It just
came up and said download complete when I never initiated
any download. I already had this on my computer but the
name in small letters (again, don't know if that matters
or not). I don't know if these are related or what. Any
suggestions?
jwatt
4.4K Posts
0
September 18th, 2004 18:00
Given the fact that several of those file names can't be found searching Google, and the bizarre error message, I'd suggest treating the situation as possible malware. I found your post in the microsoft.public.windowsxp.general newsgroup, and see that you received a general "possibly malware" reply there also.
Did you configure Ad-Aware SE as described here?
If you did, the next step is to download HijackThis, a malware analysis and removal tool, and submit the log it produces for analysis to one of the sites listed below.
With the Windows Explorer, go to C:\, right click and create a folder named HJT. Unzip the downloaded file HijackThis.zip into the newly created directory, C:\HJT.
After installing HijackThis.exe in the directory C:\HJT, run Hijackthis from that directory. Click on the 'scan' button and then 'save log' button. Save the file in the directory C:\HJT. Use a name like HijackThis.txt.
Here are some sites where you can receive help analyzing your HijackThis log from trained experts. Note that the sites require registration before you will be able to post.
Subratam.org
BleepingComputer.com
ZerosRealm.com
Copy and paste the contents of the log you saved in a new message in one of the forums listed above. Be sure to describe the problem you're experiencing. DON'T ATTEMPT TO FIX ANYTHING REPORTED BY HIJACKTHIS without expert advice!
There are lots more people with malware problems they haven't been able to resolve than there are expert HijackThis analysts, so please be patient. Please see the Alliance of Security Analysis Professionals (ASAP) site for a complete list of member sites providing support and assistance.
Jim