xsrocewA.exe

[rickyarias]

I found this process running in my machine, any idea of what it is?

 

[kurt wismer]

I found this process running in my machine, any idea of what it is?

hmmm... there once was a poster here who'd respond to those types of
questions with something like "i have a painting that's mostly yellow,
do you think it might be a van gogh?"... when you're talking about
malware or potential malware a filename provides absolutely no useful
diagnostic information...

if you think you have malware, scan your drive... if you think you have
malware your scanner can't detect, try a different scanner and/or send a
sample of the suspect file to your anti-malware vendor for analysis...

 

[Buffalo]

I found this process running in my machine, any idea of what it is?

Send a copy of it to http://www.virustotal.com
They have many anti-virus programs check it and you should know the results
in minutes.
If it is a virus, please post back.
Heck, please post back anyways.

 

[jbclem]

While you're wasting your time sending it off or asking the question to
people who don't know the answer...why not just rename it to xsrocewA.bxe.
That way it won't execute and you can see if any of your programs stop
working. Googling it (another 30 seconds wasted) shows nothing but
references to your message thread. Also, run Msconfig and see if it's
listed under the startup tab. If it is then for sure rename and/or move it
if it's parked in your System32 folder.

If it's running, download Process Explorer and when you run that you can
often see the name of the originating company or program for this file.
Right clicking(in Process Explorer) on it and chosing Properties will give
you a bunch of tabs with information that should also help figure out it's
origin.

The way I look at it, the closer the spelling (of a running process) is to a
nonsense word, the quicker I'll rename or delete it. Does xsrocewA match up
with any of your programs?


jc

 

[Buffalo]

While you're wasting your time sending it off or asking the question to
people who don't know the answer...why not just rename it to xsrocewA.bxe.

Wow, it would probably take all of 5 min or less to send it out and check
it.
Since 'it' was already running, renaming it now may not help, but certaintly
it shouldn't hurt.
Any more sound advice?