homepage Welcome to WebmasterWorld Guest from
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member
Home / Forums Index / Local / Foo
Forum Library, Charter, Moderators: incrediBILL & lawman

Foo Forum

Need help identifying adware.
8 character random filnames in startup

10+ Year Member

Msg#: 7147 posted 5:20 pm on Apr 21, 2004 (gmt 0)

Howdy y'all,

I am cleaning up a mess some guys in the back did with their computer. I have never seen something so stuffed with adware and viruses before. It wasd so bad our ISP blocked all our outbound mails.

Anyways, I think i got all the viruses off the machine, but i still have some sort of zany adware that none of the normal adware bots seem to detect.

All I know is it creates alot of annoying popups, and in the startup folder it creates .exe's that are all 8 digit random chracters.

that ring a bell for anyone?



WebmasterWorld Senior Member encyclo us a WebmasterWorld Top Contributor of All Time 10+ Year Member

Msg#: 7147 posted 6:22 pm on Apr 21, 2004 (gmt 0)

There is a program called "winwhatwhere", which has been described as a "corporate trojan" - it was "designed" and is marketed as a tool for spying on your employees, with keylogging, etc. I know that it uses random filenames, and its attempt at legitimacy might mean that some anti-spyware programs won't pick up on it.

To be honest, you're probably much better off backing up essential documents, formatting the hard drive and reinstalling everything - you can clean up as much as you like, but you can never be sure you've caught everything. If you've got winwhatwhere installed, this might be your only option.

Global Options:
 top home search open messages active posts  

Home / Forums Index / Local / Foo
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved