Questions

C:\windows\system32\ddr.exe?

+
0 Votes
Locked

C:\windows\system32\ddr.exe?

sanwardak
Hello
This open the command prompt every time I turn on the pc windows xp. I try to delete it or rename it still not going away. When I deleted it will come back. I think it is doing something with ram. someone said scan for virus I did this but not help. Can someone please tell what to do with it.

Thanks
  • +
    0 Votes
    Charvell

    What anti-virus software are you using? Did you also try using a spyware removal tool, such as Spybot S&D?

    +
    1 Votes
    markp24

    Hi,

    You may want to boot in safe mode and scan they system with your antivirus as well as spybot or malwarebyes (malwarebytes.org)
    You may also want to try booting from a Live CD (UBCD4win), TRD (trinity rescue Disk)
    and use the utilites on these to scan you system for viruses/malware.

    +
    1 Votes
    the_fifth_horseman

    Is a downloader type trojan, and most likely several of them (they rarely if ever appear individually). Removing this kind of infestation is annoying: until eradicated completely in one go, it will continue coming back.

    +
    0 Votes
    sanwardak

    I dont know if this will be the virus problem. This happan in every pc when I install the windows I am receiving this error. The disk I am using is xp pro and xp home edtion same error. The xp pro was msdn version then I converted to OEM version. I have scaned with Malwarbytes, advance system care and wincliam.
    Thanks

    +
    0 Votes
    the_fifth_horseman

    What do you mean by "converted to OEM version"? Does the issue occur immediately after you install the system from the CD, or - say - after you connect to a network (LAN or internet) or use some kind of removable media?
    Clean, freshly installed copies of Windows XP do NOT run any sort of command line tool on startup by themselves. If this was a system file, it would not be "recreating" itself in the fashion it does.

    +
    0 Votes
    sanwardak

    Hi
    I mean by OEM version is the one which the product key come with system. This happan when I install a clean copy of windows from CD. It happan after a minute or 2 when I turn on the pc, but it will not came agian when pc is on.

    Thanks

    +
    0 Votes
    the_fifth_horseman

    1. Is the computer connected to a local area network (including wireless ones) or to the Internet (modem or otherwise)?
    2. Did you use any floppy disks, CDs other than the install disk, memory cards, pendrives or external hard drives on those machines after installing the system? By "use" I mean as little as insert (or connect) them.
    3. Are there any partitions on the local hard drives other than the system one? Ones that were not formatted during the OS reinstallation? Ones you opened with Windows Explorer after reinstalling the system?

    My standard procedure would be to use HijackThis to check what is currently running on your machine and what is ran on system startup. Then see what the automated log analyser on hijackthis.de gives on the log contents.

  • +
    0 Votes
    Charvell

    What anti-virus software are you using? Did you also try using a spyware removal tool, such as Spybot S&D?

    +
    1 Votes
    markp24

    Hi,

    You may want to boot in safe mode and scan they system with your antivirus as well as spybot or malwarebyes (malwarebytes.org)
    You may also want to try booting from a Live CD (UBCD4win), TRD (trinity rescue Disk)
    and use the utilites on these to scan you system for viruses/malware.

    +
    1 Votes
    the_fifth_horseman

    Is a downloader type trojan, and most likely several of them (they rarely if ever appear individually). Removing this kind of infestation is annoying: until eradicated completely in one go, it will continue coming back.

    +
    0 Votes
    sanwardak

    I dont know if this will be the virus problem. This happan in every pc when I install the windows I am receiving this error. The disk I am using is xp pro and xp home edtion same error. The xp pro was msdn version then I converted to OEM version. I have scaned with Malwarbytes, advance system care and wincliam.
    Thanks

    +
    0 Votes
    the_fifth_horseman

    What do you mean by "converted to OEM version"? Does the issue occur immediately after you install the system from the CD, or - say - after you connect to a network (LAN or internet) or use some kind of removable media?
    Clean, freshly installed copies of Windows XP do NOT run any sort of command line tool on startup by themselves. If this was a system file, it would not be "recreating" itself in the fashion it does.

    +
    0 Votes
    sanwardak

    Hi
    I mean by OEM version is the one which the product key come with system. This happan when I install a clean copy of windows from CD. It happan after a minute or 2 when I turn on the pc, but it will not came agian when pc is on.

    Thanks

    +
    0 Votes
    the_fifth_horseman

    1. Is the computer connected to a local area network (including wireless ones) or to the Internet (modem or otherwise)?
    2. Did you use any floppy disks, CDs other than the install disk, memory cards, pendrives or external hard drives on those machines after installing the system? By "use" I mean as little as insert (or connect) them.
    3. Are there any partitions on the local hard drives other than the system one? Ones that were not formatted during the OS reinstallation? Ones you opened with Windows Explorer after reinstalling the system?

    My standard procedure would be to use HijackThis to check what is currently running on your machine and what is ran on system startup. Then see what the automated log analyser on hijackthis.de gives on the log contents.