Welcome to WebmasterWorld Guest from

Forum Moderators: incrediBILL

Message Too Old, No Replies

Need help identifying adware.

8 character random filnames in startup

5:20 pm on Apr 21, 2004 (gmt 0)

Junior Member

10+ Year Member

joined:Dec 9, 2002
votes: 0

Howdy y'all,

I am cleaning up a mess some guys in the back did with their computer. I have never seen something so stuffed with adware and viruses before. It wasd so bad our ISP blocked all our outbound mails.

Anyways, I think i got all the viruses off the machine, but i still have some sort of zany adware that none of the normal adware bots seem to detect.

All I know is it creates alot of annoying popups, and in the startup folder it creates .exe's that are all 8 digit random chracters.

that ring a bell for anyone?

6:22 pm on Apr 21, 2004 (gmt 0)

Senior Member from CA 

WebmasterWorld Senior Member encyclo is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Aug 31, 2003
votes: 6

There is a program called "winwhatwhere", which has been described as a "corporate trojan" - it was "designed" and is marketed as a tool for spying on your employees, with keylogging, etc. I know that it uses random filenames, and its attempt at legitimacy might mean that some anti-spyware programs won't pick up on it.

To be honest, you're probably much better off backing up essential documents, formatting the hard drive and reinstalling everything - you can clean up as much as you like, but you can never be sure you've caught everything. If you've got winwhatwhere installed, this might be your only option.


Join The Conversation

Moderators and Top Contributors

Hot Threads This Week

Featured Threads

Free SEO Tools

Hire Expert Members