FbubswrA.exe (windows defender)

  • Thread starter Thread starter Petey
  • Start date Start date
P

Petey

I tried Microsofts recent Windows Defender, seemed to work ok, but noticed
an entry in 'currently running programs' an entry entitled FbubswrA.exe,
referenced as a "system montior". I could not find this entry under any of
windows' other applications (taskmgr, msconfig, etc). So I disabled Windows
Defender for the time being. Anyone out there know if this works or not, if
it's worth having, and can it co exist with Spyware Blaster, Ad Aware se, CA
antivirus (free 1 yr sub.). Oh yeah, if I run Trend micro's SysClean, I
assume i should disable these other apps.?.?

thx.
 
Petey said:
I tried Microsofts recent Windows Defender, seemed to work ok, but noticed
an entry in 'currently running programs' an entry entitled FbubswrA.exe,
referenced as a "system montior". I could not find this entry under any of
windows' other applications (taskmgr, msconfig, etc). So I disabled Windows
Defender for the time being. Anyone out there know if this works or not, if
it's worth having, and can it co exist with Spyware Blaster, Ad Aware se, CA
antivirus (free 1 yr sub.). Oh yeah, if I run Trend micro's SysClean, I
assume i should disable these other apps.?.?

thx.

But the Executable process is a Virus did you cleaned your machine,
disabling Defender will not eliminate the problem/threat, the virus is
generating itself from a hidden file/application on your system.
Try to scan in safe mode and normal mode, disable this Process FbubswrA.exe
from runing.
To do that look in the registry:
Open arun command and type in : regedit click [OK] and on the Registry
Editor look for these Keys:
[-] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run =
Look in the Right pane/window and see if the process FbubswrA.exeis there
and remove it
the same on this Key with \RunOnce =

[-] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run =
Remove the process FbubswrA.exe if it is there.

[-] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce=
Remove the suspecious process FbubswrA.exe
[-]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Ext =
look for any extension create on the Explorer and deelte it.
---------
Look here;
C:\Windows\FbubswrA.exe remove it
C:\Windows\System32\FbubswrA.exe remove it.
Try to turn the Show Hidden files to be able to see all files and get rid of
it then uncheck it again.
Clear/delete your Temp files/folder:
C:\Windows\Temp =
C:\Windows\Remp\Temporary Internet Files =

HTH.
Let us know.
Regards,
nass
 
Can't seem to locate C:\WINDOWS\SYSTEM32\

any ideas?
thx

nass said:
Petey said:
I tried Microsofts recent Windows Defender, seemed to work ok, but
noticed
an entry in 'currently running programs' an entry entitled FbubswrA.exe,
referenced as a "system montior". I could not find this entry under any
of
windows' other applications (taskmgr, msconfig, etc). So I disabled
Windows
Defender for the time being. Anyone out there know if this works or not,
if
it's worth having, and can it co exist with Spyware Blaster, Ad Aware se,
CA
antivirus (free 1 yr sub.). Oh yeah, if I run Trend micro's SysClean, I
assume i should disable these other apps.?.?

thx.

But the Executable process is a Virus did you cleaned your machine,
disabling Defender will not eliminate the problem/threat, the virus is
generating itself from a hidden file/application on your system.
Try to scan in safe mode and normal mode, disable this Process
FbubswrA.exe
from runing.
To do that look in the registry:
Open arun command and type in : regedit click [OK] and on the
Registry
Editor look for these Keys:
[-] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run =
Look in the Right pane/window and see if the process FbubswrA.exeis there
and remove it
the same on this Key with \RunOnce =

[-] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run =
Remove the process FbubswrA.exe if it is there.

[-] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce=
Remove the suspecious process FbubswrA.exe
[-]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Ext
=
look for any extension create on the Explorer and deelte it.
---------
Look here;
C:\Windows\FbubswrA.exe remove it
C:\Windows\System32\FbubswrA.exe remove it.
Try to turn the Show Hidden files to be able to see all files and get rid
of
it then uncheck it again.
Clear/delete your Temp files/folder:
C:\Windows\Temp =
C:\Windows\Remp\Temporary Internet Files =

HTH.
Let us know.
Regards,
nass
 
Petey said:
Can't seem to locate C:\WINDOWS\SYSTEM32\

any ideas?
thx

nass said:
Petey said:
I tried Microsofts recent Windows Defender, seemed to work ok, but
noticed
an entry in 'currently running programs' an entry entitled FbubswrA.exe,
referenced as a "system montior". I could not find this entry under any
of
windows' other applications (taskmgr, msconfig, etc). So I disabled
Windows
Defender for the time being. Anyone out there know if this works or not,
if
it's worth having, and can it co exist with Spyware Blaster, Ad Aware se,
CA
antivirus (free 1 yr sub.). Oh yeah, if I run Trend micro's SysClean, I
assume i should disable these other apps.?.?

thx.

But the Executable process is a Virus did you cleaned your machine,
disabling Defender will not eliminate the problem/threat, the virus is
generating itself from a hidden file/application on your system.
Try to scan in safe mode and normal mode, disable this Process
FbubswrA.exe
from runing.
To do that look in the registry:
Open arun command and type in : regedit click [OK] and on the
Registry
Editor look for these Keys:
[-] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run =
Look in the Right pane/window and see if the process FbubswrA.exeis there
and remove it
the same on this Key with \RunOnce =

[-] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run =
Remove the process FbubswrA.exe if it is there.

[-] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce=
Remove the suspecious process FbubswrA.exe
[-]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Ext
=
look for any extension create on the Explorer and deelte it.
---------
Look here;
C:\Windows\FbubswrA.exe remove it
C:\Windows\System32\FbubswrA.exe remove it.
Try to turn the Show Hidden files to be able to see all files and get rid
of
it then uncheck it again.
Clear/delete your Temp files/folder:
C:\Windows\Temp =
C:\Windows\Remp\Temporary Internet Files =

HTH.
Let us know.
Regards,
nass

How are you trying to access it, through the Windows Explorer or through
find command?.
Or is it been deleted?.
HTH.
nass
 
Found the folder (system32) i forgot to enable "see hidden files..."
couldnt find the "FbubswrA.exe" anywhere using explorer, but found it
w/msconfig, and disabled it there, then i just re enabled windows defender,
should i re-enable the "Fbub" with msconfig then scan and delete? Don't
want to assume, I would rather know for sure before I attempt the scan,
which i plan on running safe mode, let me know plz n thx.
nass said:
Petey said:
Can't seem to locate C:\WINDOWS\SYSTEM32\

any ideas?
thx

nass said:
:

I tried Microsofts recent Windows Defender, seemed to work ok, but
noticed
an entry in 'currently running programs' an entry entitled
FbubswrA.exe,
referenced as a "system montior". I could not find this entry under
any
of
windows' other applications (taskmgr, msconfig, etc). So I disabled
Windows
Defender for the time being. Anyone out there know if this works or
not,
if
it's worth having, and can it co exist with Spyware Blaster, Ad Aware
se,
CA
antivirus (free 1 yr sub.). Oh yeah, if I run Trend micro's SysClean,
I
assume i should disable these other apps.?.?

thx.


But the Executable process is a Virus did you cleaned your machine,
disabling Defender will not eliminate the problem/threat, the virus is
generating itself from a hidden file/application on your system.
Try to scan in safe mode and normal mode, disable this Process
FbubswrA.exe
from runing.
To do that look in the registry:
Open arun command and type in : regedit click [OK] and on the
Registry
Editor look for these Keys:
[-] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run =
Look in the Right pane/window and see if the process FbubswrA.exeis
there
and remove it
the same on this Key with \RunOnce =

[-] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run =
Remove the process FbubswrA.exe if it is there.

[-]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce=
Remove the suspecious process FbubswrA.exe
[-]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Ext
=
look for any extension create on the Explorer and deelte it.
---------
Look here;
C:\Windows\FbubswrA.exe remove it
C:\Windows\System32\FbubswrA.exe remove it.
Try to turn the Show Hidden files to be able to see all files and get
rid
of
it then uncheck it again.
Clear/delete your Temp files/folder:
C:\Windows\Temp =
C:\Windows\Remp\Temporary Internet Files =

HTH.
Let us know.
Regards,
nass

How are you trying to access it, through the Windows Explorer or through
find command?.
Or is it been deleted?.
HTH.
nass
 
Petey said:
Found the folder (system32) i forgot to enable "see hidden files..."
couldnt find the "FbubswrA.exe" anywhere using explorer, but found it
w/msconfig, and disabled it there, then i just re enabled windows defender,
should i re-enable the "Fbub" with msconfig then scan and delete? Don't
want to assume, I would rather know for sure before I attempt the scan,
which i plan on running safe mode, let me know plz n thx.
nass said:
Petey said:
Can't seem to locate C:\WINDOWS\SYSTEM32\

any ideas?
thx



:

I tried Microsofts recent Windows Defender, seemed to work ok, but
noticed
an entry in 'currently running programs' an entry entitled
FbubswrA.exe,
referenced as a "system montior". I could not find this entry under
any
of
windows' other applications (taskmgr, msconfig, etc). So I disabled
Windows
Defender for the time being. Anyone out there know if this works or
not,
if
it's worth having, and can it co exist with Spyware Blaster, Ad Aware
se,
CA
antivirus (free 1 yr sub.). Oh yeah, if I run Trend micro's SysClean,
I
assume i should disable these other apps.?.?

thx.


But the Executable process is a Virus did you cleaned your machine,
disabling Defender will not eliminate the problem/threat, the virus is
generating itself from a hidden file/application on your system.
Try to scan in safe mode and normal mode, disable this Process
FbubswrA.exe
from runing.
To do that look in the registry:
Open arun command and type in : regedit click [OK] and on the
Registry
Editor look for these Keys:
[-] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run =
Look in the Right pane/window and see if the process FbubswrA.exeis
there
and remove it
the same on this Key with \RunOnce =

[-] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run =
Remove the process FbubswrA.exe if it is there.

[-]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce=
Remove the suspecious process FbubswrA.exe
[-]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Ext
=
look for any extension create on the Explorer and deelte it.
---------
Look here;
C:\Windows\FbubswrA.exe remove it
C:\Windows\System32\FbubswrA.exe remove it.
Try to turn the Show Hidden files to be able to see all files and get
rid
of
it then uncheck it again.
Clear/delete your Temp files/folder:
C:\Windows\Temp =
C:\Windows\Remp\Temporary Internet Files =

HTH.
Let us know.
Regards,
nass

How are you trying to access it, through the Windows Explorer or through
find command?.
Or is it been deleted?.
HTH.
nass

Hi Petey,
No don't Enable the Fbub at all, just scan with defender and also download
Spybot S&D from here a do scan:
http://www.safer-networking.org
Did you run an Anti-virus Up2date to scan for Viruses or not?.
HTH.
Let us know.
Regards,
nass
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top