ulmcud.exe

[Steve Mallin]

Anyone know what this is? I assume its some sort of spyware. It appears as
a process started by me, as opposed to local service, system, or network
service. Every time I try to close it, it pops back up. Sometimes it eats
all my available processor.

Concurrently, there is a program running under a familiar microsoft product
name, such as calc.exe, packager.exe, or explorer.exe. No, I do not have
calc open, packager running, and yes, there is another explorer open. The
explorer in question only 64k of memory, as opposed to the 28Meg "real"
explorer. When I close one of these, another one pops up. If I close it
enough times (~5) it will change from calc.exe to packager.exe, etc. Anyone
know what's going on here?

 

[Andre Da Costa]

Best recommendation then would be to restart in safe mode and do a deep
scan. On the Scan Page choose Scan Options > Full System Scan. Do this at
least two times until detects something. Also, before you restart in safe
mode, disable System Restore, some trojans and spyware programs are likely
to restore themselves with system snap shots:

Right click My Computer > Properties > System Restore, check the "Disable
System Restore" check box and restart in safe mode.

Restart in safe mode instructions:
www.microsoft.com/resources/documentation/
windows/xp/all/proddocs/en-us/boot_failsafe.mspx

 

[Steve Mallin]

Thanks for the suggestion, but the program is still there, and frequently
eats up over 90% of my processor. Has anyone else had a problem with this
file? (ulmcud.exe)

Additionally, all the other spyware is still found on my computer. Every
time I turn on my computer, I do a scan and get the same spyware results. I
delete them, and they appear again the next time I turn on the computer.
The only one it seems to have really taken care of is EBates Moe Money
maker. I still always get farmmext transponder and a bunch of others. Any
other suggestions? Has anyone heard of this specific file? (ulmcud.exe)?
Thanks.