INTERNET32.EXE???

[Malke]

I have a file called "internet32.exe" in my startup. Does anyone know
what
that is? It looks very suspicious to me.

Well, when you see something suspicious, the first thing to do is scan
with your current antivirus using updated definitions. You *do* have
one, right? Then remove all spyware with tools like Spybot S&D and/or
Ad-aware. Also, Google Is Your Friend(tm). Googling for Internet32
brings up a link from Mcafee about an IRC Trojan.

Malke

 

[Will Denny]

Hi

It does look suspicious - I can't find any reference to it:

Have you virus checked your system with the latest definitions for your AV program and checked for any spyware that may be on your system:

Ad-Aware - www.lavasoftusa.com
Spybot - http://security.kolla.de

 

[Stephen]

I'd be concerned too. Sorry I do not know what it is. It could be one of
your apps e.g. Here, PowerDVD used to install and run in the background a
program called remotcntrl.exe [ looks like Remote Control ] which had me all
worried whenI first noticed it running as a process.

Anyway,

Remove it from the Startup folder if it makes you uncomfortable, but for the
time being just move it to C:\ and let it sit. Also run msconfig:

Start > Run > type in "msconfg" > hit Enter > go to the Startup tab and look
at the list. Notice some things are automatically started through the
Registry not the Startup folder. Uncheck what bothers you.

*If* this is a new virus you might send a copy to your favourite anti-virus
company. Check their website or email them first for instructions on sending
them a new virus. They like to get them through proper channels. It enables
them to start work on building a defintition etc. e.g. Symantec has a page
for new virus submission:

http://securityresponse.symantec.com/avcenter/submit.html

Also,

Right-click on taskbar > select Task Manager > Processes tab

You might see it in the list. If you feel like it you can end it's process.

Stephen

--

Drop 123 to email me.


| I have a file called "internet32.exe" in my startup. Does anyone know
what
| that is? It looks very suspicious to me.
|
| Thanks
|
|

 

[TonyP]

I have a file called "internet32.exe" in my startup. Does anyone know what
that is? It looks very suspicious to me.

Thanks

 

[TonyP]

I scanned with the latest anti-virus program and I scanned for and removed
spyware using SpyBot.

 

[Barry R. Ford]

Network Associates calls this IRC/Flood.ca. Here is a link to their
page for further information.

<http://vil.nai.com/vil/content/v_100361.htm>

I tried to find similar information on Symantec's website, but they had
so many versions of "Backdoor.IRC.Flood" that I didn't feel like
checking them all.