Hi,
I've recently re-installed Win2k Server due to some rather irresponsible
surfing & email habits of my client (who owns the server). Although all
firewall ports have been blocked, I've recently noticed an odd program
showing up in the task manager: ckxxnx.exe
An entry in the registry called Windows Compliance is also being created
under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and
RunServices with ckxxnx.exe as its value.
I've done a thorough search on the hard drive and can't find it nor can the
av software.
I've tried deleting the registry entries, but every time the server is
rebooted they reappear as does the task manager entry. It seems to have
turfed the administrative shares as well.
Does anyone know what this is? Searches in Google, MS and Symantec have
turned up nada.
Thanks,
Shawn
|