processes 23318447 and 45318239

[Ben]

These two processes are detected upon startup by Webroot Spy Sweeper, and show
no information as to the identity of the processes. Google found nothing.


I'm running XP Pro, SP2 with all the current MS updates.

Spy Sweeper is Version 3.0.

Any suggestions as to what these processes might be? I kind of hate to remove
the exe files if I don't know what they were supposed to do.
TIA
]
Ben

 

[WinGuy]

Hi, Ben
Not Enough Info

Does MSCONFIG identify how the 2 processes are being started? Maybe it's
from something installed into Program Files. How about the properties of the
files, missing copyright etc. info? ==> Where are the files located at? <==

Search the registry for the .exe names, maybe find where they are being
launched from. Does the found path look ok?

You could boot into Diagnostic mode (after first booting into Safe mode and
running MSCONFIG) and then just go temporarily rename the files, then boot
again with Normal mode selected from MSCONFIG, to see what happens.

 

[Ben]

Hi,

Located 23318117.exe, and found the internal name to be winpup. I renamed it
and restarted and did not get any warning from the Spy Sweeper. I think it is
associated with pop up ads???

I find the other, 45318239.exe, in msconfig startup, but a search does not
locate the file (said it was in Windows/system32) after my renaming the first
mentioned exe.

Thanks for your help.... am I on the right track?

Ben

Hi, Ben
Not Enough Info

Does MSCONFIG identify how the 2 processes are being started? Maybe it's
from something installed into Program Files. How about the properties of the
files, missing copyright etc. info? ==> Where are the files located at? <==

Search the registry for the .exe names, maybe find where they are being
launched from. Does the found path look ok?

You could boot into Diagnostic mode (after first booting into Safe mode and
running MSCONFIG) and then just go temporarily rename the files, then boot
again with Normal mode selected from MSCONFIG, to see what happens.

These two processes are detected upon startup by Webroot Spy Sweeper, and show
no information as to the identity of the processes. Google found nothing.


I'm running XP Pro, SP2 with all the current MS updates.

Spy Sweeper is Version 3.0.

Any suggestions as to what these processes might be? I kind of hate to remove
the exe files if I don't know what they were supposed to do.
TIA
]
Ben

 

[WinGuy]

Hi, Ben
http://sarc.com/avcenter/venc/data/adware.winpup.html
Sounds like old adware, and probably the 2nd file was the "random" one that
the above link speaks of. You probably got rid of it now, but check the
registry entry anyway. If all seems ok, turn off system restore (if using ME
then reboot at this point), and then turn it back on (if using ME then
reboot again) -- that will clear all the previous restore points so that it
can not be accidenttly restored.

Hi,

Located 23318117.exe, and found the internal name to be winpup. I renamed it
and restarted and did not get any warning from the Spy Sweeper. I think it is
associated with pop up ads???

I find the other, 45318239.exe, in msconfig startup, but a search does not
locate the file (said it was in Windows/system32) after my renaming the first
mentioned exe.

Thanks for your help.... am I on the right track?

Ben

Hi, Ben
Not Enough Info

Does MSCONFIG identify how the 2 processes are being started? Maybe it's
from something installed into Program Files. How about the properties of the
files, missing copyright etc. info? ==> Where are the files located at? <==

Search the registry for the .exe names, maybe find where they are being
launched from. Does the found path look ok?

You could boot into Diagnostic mode (after first booting into Safe mode and
running MSCONFIG) and then just go temporarily rename the files, then boot
again with Normal mode selected from MSCONFIG, to see what happens.

These two processes are detected upon startup by Webroot Spy Sweeper,

and
show

no information as to the identity of the processes. Google found nothing.


I'm running XP Pro, SP2 with all the current MS updates.

Spy Sweeper is Version 3.0.

Any suggestions as to what these processes might be? I kind of hate to remove
the exe files if I don't know what they were supposed to do.
TIA
]
Ben

 

[Ben]

Hi,

That seems to do it.... all evidence gone!!

Thanks

Ben

Hi, Ben
http://sarc.com/avcenter/venc/data/adware.winpup.html
Sounds like old adware, and probably the 2nd file was the "random" one that
the above link speaks of. You probably got rid of it now, but check the
registry entry anyway. If all seems ok, turn off system restore (if using ME
then reboot at this point), and then turn it back on (if using ME then
reboot again) -- that will clear all the previous restore points so that it
can not be accidenttly restored.

Hi,

Located 23318117.exe, and found the internal name to be winpup. I renamed it
and restarted and did not get any warning from the Spy Sweeper. I think it is
associated with pop up ads???

I find the other, 45318239.exe, in msconfig startup, but a search does not
locate the file (said it was in Windows/system32) after my renaming the first
mentioned exe.

Thanks for your help.... am I on the right track?

Ben

Hi, Ben
Not Enough Info

Does MSCONFIG identify how the 2 processes are being started? Maybe it's
from something installed into Program Files. How about the properties of the
files, missing copyright etc. info? ==> Where are the files located at? <==

Search the registry for the .exe names, maybe find where they are being
launched from. Does the found path look ok?

You could boot into Diagnostic mode (after first booting into Safe mode and
running MSCONFIG) and then just go temporarily rename the files, then boot
again with Normal mode selected from MSCONFIG, to see what happens.

These two processes are detected upon startup by Webroot Spy Sweeper, and
show
no information as to the identity of the processes. Google found nothing.


I'm running XP Pro, SP2 with all the current MS updates.

Spy Sweeper is Version 3.0.

Any suggestions as to what these processes might be? I kind of hate to
remove
the exe files if I don't know what they were supposed to do.
TIA
]
Ben