9jgvwv.exe in prefetch

[Guest]

I have the file 9jgvwv.exe in my prefetch folder and it appears to be
responsible for all the pop-ups im getting. Ive tried searching google and
other search engines for info about the file but there seems to be nothing
out there. every time i delete the file it comes back again and I dont want
to completely disable prefetch, does anyone have any suggestions for
permanently deleting this prefetch? Any help would be great, thanks!

 

[Jon Erlandson]

The prefetch only records information about what's being loaded at boot.
You need to stop the file from loading then delete it. Install HijackThis,
run and have it scan and save a log file then post the log on one of the
help forums posted on Tomcoyote. You can examine the log yourself. copy and
paste into google the name of any process you have a question about
(9jgvwv.exe is unknown though there is info on most.) You could boot into
safe mode, search for the file and delete it but there is possibly another
program calling this one.

The Reappearing Prefetch Folder
http://www.pcmag.com/article2/0,1759,1683520,00.asp

How to read HijackThis Logs
http://www.antionline.com/showthread.php?s=&threadid=255989

Trend Micro House Call
http://housecall.trendmicro.com/

Spybot Search & Destroy
http://www.safer-networking.org/en/download/index.html

Ad-Aware
http://www.lavasoftusa.com/software/adaware/

CWShredder
http://www.intermute.com/spysubtract/cwshredder_download.html

McAfee Stinger
http://vil.nai.com/vil/stinger/

HijackThis
http://www.tomcoyote.org/hjt/

SpywareGuard
http://www.javacoolsoftware.com/spywareguard.html

PC PitStop
http://pcpitstop.com/pcpitstop/

 

[Taurarian]

I would start by looking for spyware/malware/viruses



Unexplained computer behavior may be caused by third-party software
http://support.microsoft.com/default.aspx?scid=kb;en-us;827315

http://www.microsoft.com/athome/security/spyware/default.mspx
Fight Spyware – articles by Microsoft

Spyware Programs links:-
www.lavasoftusa.com Ad-Aware
www.security.kolla.de Spybot

SpywareBlaster
http://www.javacoolsoftware.com/spywareblaster.html

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Downloadable McAfee AVERT Stinger:
Stinger: http://vil.nai.com/vil/stinger/
stand-alone utility used to detect and remove specific viruses. It is not a
substitute for full anti-virus protection, but rather a tool to assist
administrators and users when dealing with an infected system. Stinger utilizes
next generation scan engine technology, including process scanning, digitally
signed DAT files, and scan performance optimizations.



Perhaps an online security/virus check
Symantec
http://security.norton.com/sscv6/default.asp?langid=ie&venid=sym
Trend Micro House Call:
http://housecall.trendmicro.com/
Panda ActiveScan;
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
McAfee FreeScan:
http://us.mcafee.com/root/mfs/default.asp
Kaspersky Labs On-line Virus Checker:
http://www.kaspersky.com/remoteviruschk.html
BitDefender Online Scan:
http://www.bitdefender.com/scan/licence.php

Free anti virus programs
http://www.grisoft.com/us/us_dwnl7.php
http://www.avast.com/eng/avast_4_home.html

 

[Guest]

I've already done a full virus scan with norton antivirus and mcafee 2005,
ive tried ad-aware and another thing I cant remember the name of, none of
them get rid of it.

 

[David Candy]

It's nothing to do with prefetch. Get filemon from www.sysinternals.com and monitor that file and it will tell you the program creating it. There is two (at least) programs, watching out for each other. Delete one and the other repairs.

 

[Alex Nichol]

I have the file 9jgvwv.exe in my prefetch folder and it appears to be
responsible for all the pop-ups im getting.

Make sure it is just .exe and not a .exe-nnnn.pf which is a normal
prefetch record.

It will be being regenerated there by whatever starts the run, probably
a different file in a different name. Do a full investigation for
Adware - see for example http://aumha.org/a/parasite.htm