lx4s4k.exe

Anybody know what this is? It was in my registry but I
didn't know whether it was malicious or not. I blocked
it, but have no idea if I should have.

Hi there this file isnt in the registry what your seeing
is a reference to this file in there such as the software
folder or run command. Its a random name so that usually
means its bad but can you do this, Find the file on your
system and then upload it at a malware scan site and let
us know the results.

First Enable hidden files and folders:

Go to 'Start Menu' then 'Search' Click 'Tools' on the top
bar then goto 'Folder Options' When this opens goto
the 'View tab' and make sure that 'Show hidden files and
folders' (or 'Show all files') is checked. Also make sure
that Display the contents of System Folders' is checked.
Windows XP's search feature is a little different. When
Searching you click on 'All files and folders' on the
left pane, click on the 'More advanced options' at the
bottom. Make sure that 'Search system folders', 'Search
hidden files and folders', and 'Search subfolders' are
checked.

Then search for

lx4s4k.exe - Make sure its the exact spelling of the file
you see named in the registry


When its found then goto one of these malware sites and
press browse and then find the file on your system

http://www.virustotal.com/

http://virusscan.jotti.org/

After you have the file or any other related files if you
find it in a folder then press send for the first site or
sumbit for the second and see what the malware reading is

With this info it will make it alot easier to know what
you have on your system, If you cannot find it let us
know then I can post afew scanners you can run

Regards

Andy

Can you actually find it on the machine? If so, submit it to:

http://www.virustotal.com
http://virusscan.jotti.org

(look for the little browse window in the top right area of both pages)

Do you also have something called nail.exe on your machine? Do you see
popups labelled "Aurora?"

--

"janew" <anonymous@discussions.microsoft.com> wrote in message
news:005b01c5a69a$ee3767b0$a501280a@phx.gbl...
> Anybody know what this is? It was in my registry but I
> didn't know whether it was malicious or not. I blocked
> it, but have no idea if I should have.