Security

Ask something
Discussion Locked

Mystery self loading apps

0 helpful
9 replies

by rick h

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We have one machine with Win ME and the rest are 98's. Recently the ME was slowing down and I found the recourses were low (65%) right after boot up. The usual is 90%- 95%. I found some apps through "crl alt del" and adaware took care of some but not all. Later after some trial and error I got rid of them, rebooted and more were there. These are a few of the names found on the running list: ysljoqfx.exe, Jgpkzd, Ajcl & Tsso.
What are these, how can I prevent getting them, and whats the best way to remove them? We are using TCP/Ip networked through Lantastic. Our server is data storage/print server only. All software is stand alone for all eleven computers. Thanks for any advice you can give.
Rick

9 replies

by Former member

You should probably get some anti-virus software and scan that computer. If you don't know what the services are, look them up in Google and delete them if they are not known apps, beginning with ysljoqfx.exe.

by rick h

Thanks for the answer but, "been there done that" NAV found in the first place

by jeromey

I use a program called Spybot - Search & Destroy. It is a free Adware/Spyware removal program. Can be found on Download.com

by Former member

Hey, check to see if you have several c:\windows\kjdkdf.exe files, except the .exe files will all be named differently, but have the same size (94,208 bytes). YOu may be infected with teh W32.HAI worm and the Anti-virus is not catching it. I know Trend was not catching it until last Friday.

by penguin netwerx

Start | Run | regedit
Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN
and check the entries there. If you see anything out of the ordinary, MAKE A BACKUP OF THE REGISTRY KEY BEFORE REMOVING ANY ENTRIES.

Another place to check is the Start menu (Startup group.)

I don't know if this works on WinME, but you could try doing:

Start | Run | msconfig

Check the last tab on the right and everything that starts with the O/S will be listed there. To prevent an app from starting, remove the checkmark next to the entry.

by cmcgarity

Use SpyBot Search & Destroy.... when installed, right click the desktop icon and clear the "-easymode" string from the properties, and start SpyBot. You now have more options, including the ability to Immunize yourself against known hijackers and bad sites.... make sure to keep updating regularly... Download from download.com.com

This discussion is closed to new replies.