What the hell is this?

Discussion in 'Computer Gaming Forum' started by Twimfy, Nov 19, 2007.

  1. Twimfy

    Twimfy Site Supporter 2015

    Joined:
    Apr 10, 2006
    Messages:
    3,570
    Likes Received:
    32
    [​IMG]

    4exhmrgml_6.exe for example.

    I'm running Vista 64bit and I've been happy with it for a long time now. Recently however a bunch of random processes such as the one above have started creating themselves in my personal temp folder. They have different names but they all have the 'exhmrgml' bit in the middle only the number change sometimes. They run themselves in the system processes at the most obscure moments and take up about 10% of the cpu.

    I've tried anti virus and anti spyware which found nothing, deleting them stops them for a while and then they come back.

    They don't really do much apart from when one is active the cursor focus will move out of the current window at random as if you'd started something else.

    There's nothing unusual running in the start up either.

    I'm totally baffled, and even google can't answer.
     
    Last edited: Nov 19, 2007
  2. PhreQuencYViii

    PhreQuencYViii Champion of the Forum

    Joined:
    May 15, 2005
    Messages:
    5,408
    Likes Received:
    6
    Wierd, I have no clue. I should try Vista 64, i've ran 32 for a year and need to reinstall sometime.
     
  3. ASSEMbler

    ASSEMbler Administrator Staff Member

    Joined:
    Mar 13, 2004
    Messages:
    19,394
    Likes Received:
    995
    A friend says it's a performance update.
     
    Last edited by a moderator: Nov 19, 2007
  4. madhatter256

    madhatter256 Illustrious Member

    Joined:
    Mar 13, 2004
    Messages:
    6,578
    Likes Received:
    4
    I don't know. Looks spammish to me. Where is the .exe file located? If it's not in a program files directory and in an Application Data folder in your user account, then its most likely malware.
     
  5. Johnny

    Johnny Gran Turismo Freak and Site Supporter 2013,2015

    Joined:
    Mar 14, 2004
    Messages:
    6,230
    Likes Received:
    397
  6. Twimfy

    Twimfy Site Supporter 2015

    Joined:
    Apr 10, 2006
    Messages:
    3,570
    Likes Received:
    32
    Well after using process monitor I found one other process that was malicious and since I deleted that, these weird .exe's have gone.

    Seems permanent but I'll keep an eye out, they seem pretty random in their occurence, I've also learnt that they access the web.
     
  7. Johnny

    Johnny Gran Turismo Freak and Site Supporter 2013,2015

    Joined:
    Mar 14, 2004
    Messages:
    6,230
    Likes Received:
    397
    It's a great tool, right? Glad you discovered the problem and got rid of it.

    If you can, use HijackThis and check if everything is alright.

    Under Windows, i strongly suggest Firefox + AdBlock Plus + NoScript for safe web browsing, plus SpywareBlaster + Spybot 1.5 + Ad-Aware2007.

    Or simply run Linux :110: for web stuff.
     
    Last edited: Nov 20, 2007
  8. Yakumo

    Yakumo Pillar of the Community *****

    Joined:
    Mar 14, 2004
    Messages:
    20,515
    Likes Received:
    1,050
    I installed Fire Fox just for this one bloody site. Anyway, I've found Fire Fox to be a lot slower than IE :nod: So I'm back on IE now. Also long as I have SpyBot and Antivirus running I'm fine

    Yakumo
     
  9. PhreQuencYViii

    PhreQuencYViii Champion of the Forum

    Joined:
    May 15, 2005
    Messages:
    5,408
    Likes Received:
    6
    OPERAAAAAAAAAAAAAAAAAAAAAAAAAAA

    Fasterfox or something works well too, so does Firefox after the tweaks. I just really don't like Fox though.
     
  10. Johnny

    Johnny Gran Turismo Freak and Site Supporter 2013,2015

    Joined:
    Mar 14, 2004
    Messages:
    6,230
    Likes Received:
    397
    Slow? Try Fasterfox plugin then. My Firefox is full of plugins and is a lot faster than IE.

    Anyway, if you like Spybot, get SpywareBlaster. It works together with Spybot to add extra protection to IE and Firefox. It blocks malware, adware and tracking cookies.

    I like Opera too, but i'm so used to Firefox that i can't stop using, although i have Opera as well. As for IE, i only use it (when it's needed) through Firefox, thanks to IE Tab.
     
  11. Twimfy

    Twimfy Site Supporter 2015

    Joined:
    Apr 10, 2006
    Messages:
    3,570
    Likes Received:
    32
    Lol,

    I already run all of those...not one of them picked any of these up. Adaware 2007 has major compatibility issues with x64 too.
     
  12. Tomcat

    Tomcat Familiar Face

    Joined:
    Jul 4, 2004
    Messages:
    1,363
    Likes Received:
    1
    Ubuntu
    Linux Mint
    Amen.
     
  13. Johnny

    Johnny Gran Turismo Freak and Site Supporter 2013,2015

    Joined:
    Mar 14, 2004
    Messages:
    6,230
    Likes Received:
    397
    Those programs are just protection, not a shield. Of course you won't be 100% safe, but with all those stuff you can at least feel protected. A good Firewall and Antivirus help a lot as well.

    Try using Windows without them and you'll understand what i'm taling about.
     
    Last edited: Nov 20, 2007
  14. opethfan

    opethfan Dauntless Member

    Joined:
    Dec 13, 2006
    Messages:
    753
    Likes Received:
    2
    Firefox loves RAM. I've got a gig of DDR2-533, and it still gets a bit ugly sometimes.
     
  15. EvilWays

    EvilWays Gutsy Member

    Joined:
    Dec 15, 2005
    Messages:
    497
    Likes Received:
    1
    Got 4 gigs of DDR2-667 in mine...leave Firefox open for a while (browse for a while before leaving for work, continue when back home) with more "active" sites (read: sites with flash ads and whatnot, and gmail) @ 6-9 tabs open and Firefox creeps up to 275-280MB (more common around 150-200MB).
     
  16. Adderall

    Adderall Member

    Joined:
    Nov 20, 2007
    Messages:
    9
    Likes Received:
    0
    I have a separate box for questionable programs, unsafe browsing, and porn. After a week or so of testing, I move programs and content over.

    The "good box" then isn't cluttered by 10 million AV/anti-spyware programs.
     
sonicdude10
Draft saved Draft deleted
Insert every image as a...
  1.  0%

Share This Page