Every time I start my computer I get an error window saying "Windows cannot
find
C:\WINDOWS\system32\proper.exe". Is This a real concern or should I ignore
it. The funtionality of the computer does not seem compromised. However, I
am no longer able to do a "system restore". Is this a result of the above
error?
Hello normalnorm
The error message itself is harmless, but it's an indication that your
computer has been and still might be infected. Proper.exe is associated
with the Win32/Qhost.ZR trojan, which pops up fake security alerts on
your PC.
Looks like your antivirus or other security programs have deleted
proper.exe, but the command telling Windows to load it on startup is
still in the Registry. Your problem running System Restore could be
because of some of the system changes this malware makes, or an
indication that the machine isn't totally clean yet.
You might want to Google proper.exe for more information or get help
from malware removal experts in a specialist forum. Here's some info
that might help, courtesy of MS MVP PA Bear:
------------------
Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware
When all else fails, HijackThis v2.0.2
(
http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use
(in conjuction with some other utilities). HijackThis will NOT fix
anything on its own, but it will help you to both identify and remove
any hijackware/spyware with assistance from an expert. **Post your log
to
http://aumha.net/viewforum.php?f=30,
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html, or other appropriate forums for
review by an expert in such matters, not here.**
