Unknown Application

[Guest]

Hi

I have recently become aware of a file been run from the windows directory
called
Xyzhsox2.exe and identifed as windows Xyzhsox2 server.

Im a bit unsure of this program as it refuses antivirus scans and is not
something i have seen before. I have tried searching with its name but
nothing seems to come up on microsoft or the web about it.

can someone let me know if this is a normal new windows file and if so what
does it do?
--
Windows XP Home (SP2)
Pentium 4
1GB DDR-SDram
Mstar 7236 ATX MBoard
2 x GEForce 7950 in SLI Mode

 

[C J.]

With a name like that... it can't be a legit Windows program file.
Given the fact I can't find anything about it either... I suspect its some
form of malware thats been downloaded. You could try submitting the file to
VirusTotal and see if their scanners detect any payload.

http://www.virustotal.com/vt

Think about this: If your Anti-virus refused to scan it - it don't sound
good... at all.

 

[Marcin Domaslawski]

Hi,

It looks like an malware file. Open Task Manager (CTRL + Shift + Esc) ->
Processes tab and find process and close it. Then find file on disk and
delete it. Next open Run -> msconfig and go to Startup tab. Check if there
is entry related to this file - if exists uncheck it. Reboot.

If you will not able to do first task - launch system in Safe mode and do
this there.

Marcin Domaslawski

 

[Frank\(FL\)]

Hi

I have recently become aware of a file been run from the windows
directory called
Xyzhsox2.exe and identifed as windows Xyzhsox2 server.

Im a bit unsure of this program as it refuses antivirus scans and is
not something i have seen before. I have tried searching with its
name but nothing seems to come up on microsoft or the web about it.

can someone let me know if this is a normal new windows file and if
so what does it do?

Here is a start....
http://www.castlecops.com/t194684-xyzhSox2_exe.html