P
PaulaDawn
ULHDBZHW This has shown up in my services? I have googled it and it doesn't
show up? What is it? and if its bad how to get rid of it?
show up? What is it? and if its bad how to get rid of it?
Install the app
How to install the app on iOS
Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
H
Heirloom
Did you left click on it to get the 'description?' Have you done a search
in the reg and your HD for it? (when searching the HD, be sure to do a
'text' search as well as the files and folder). I can't tell you what it
is....I don't have it and, like you, nothing shows on the Google radar.
You should look in the MSCONFIG Startup for anything unusual, or, try
disabling it in Services and see what happens, run a good
spyware/malware/adware app to see if it picks up on it. I.E. Spybot S&D,
Adaware SE, HijackThis!, etc. Bottom line, something that cryptic probably
ain't good.
Heirloom, old and keep us
posted
in the reg and your HD for it? (when searching the HD, be sure to do a
'text' search as well as the files and folder). I can't tell you what it
is....I don't have it and, like you, nothing shows on the Google radar.
You should look in the MSCONFIG Startup for anything unusual, or, try
disabling it in Services and see what happens, run a good
spyware/malware/adware app to see if it picks up on it. I.E. Spybot S&D,
Adaware SE, HijackThis!, etc. Bottom line, something that cryptic probably
ain't good.
Heirloom, old and keep us
posted
W
Wesley Vogel
If you have not used RootkitRevealer...
Update your antivirus software and run a full system scan.
Update whatever anti-spyware applications that you have and run a full
system scan with each one.
If you have used RootkitRevealer, it adds a random named *.exe file and a
random named service and runs as that service. The random named *.exe file
will show up in %userprofile%\Local Settings\Temp folder. Every time you
run
RootkitRevealer it adds another random service to services.msc. The
randomly named *.exe file will be deleted, but the registry settings are
left behind.
[[The reason that there is no longer a command-line version is that malware
authors have started targeting RootkitRevealer's scan by using its
executable name. We've therefore updated RootkitRevealer to execute its scan
from a randomly named copy of itself that runs as a Windows service.]]
http://www.sysinternals.com/Utilities/RootkitRevealer.html
RootkitRevealer leaves references to these random named *.exe files behind
so that you see strange service names in services.msc.
If you do not want to mess in the registry, see Alternate method below.
You'll find the left behind services here...
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Locate the service(s) in the list. ImagePath should point to
Local Settings\Temp folder, as a double check.
Delete them and reboot.
[[Important This article contains information about modifying the registry.
Before you modify the registry, make sure to back it up and make sure that
you understand how to restore the registry if a problem occurs. For
information about how to back up, restore, and edit the registry, click the
following article number to view the article in the Microsoft Knowledge
Base: 256986 Description of the Microsoft Windows Registry]]
http://support.microsoft.com/default.aspx?kbid=256986
Alternate method To delete a service.
Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click the service you want to get rid of |
On the General tab, Service name: take note of the Service Name not the
Display Name | Close Services
Then open a command prompt...
Start | Run | Type: cmd | Click OK |
Type: sc delete Whateverservice Display Name
and hit Enter
Reboot.
See...
sc delete
here...
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sc.mspx
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In
Update your antivirus software and run a full system scan.
Update whatever anti-spyware applications that you have and run a full
system scan with each one.
If you have used RootkitRevealer, it adds a random named *.exe file and a
random named service and runs as that service. The random named *.exe file
will show up in %userprofile%\Local Settings\Temp folder. Every time you
run
RootkitRevealer it adds another random service to services.msc. The
randomly named *.exe file will be deleted, but the registry settings are
left behind.
[[The reason that there is no longer a command-line version is that malware
authors have started targeting RootkitRevealer's scan by using its
executable name. We've therefore updated RootkitRevealer to execute its scan
from a randomly named copy of itself that runs as a Windows service.]]
http://www.sysinternals.com/Utilities/RootkitRevealer.html
RootkitRevealer leaves references to these random named *.exe files behind
so that you see strange service names in services.msc.
If you do not want to mess in the registry, see Alternate method below.
You'll find the left behind services here...
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Locate the service(s) in the list. ImagePath should point to
Local Settings\Temp folder, as a double check.
Delete them and reboot.
[[Important This article contains information about modifying the registry.
Before you modify the registry, make sure to back it up and make sure that
you understand how to restore the registry if a problem occurs. For
information about how to back up, restore, and edit the registry, click the
following article number to view the article in the Microsoft Knowledge
Base: 256986 Description of the Microsoft Windows Registry]]
http://support.microsoft.com/default.aspx?kbid=256986
Alternate method To delete a service.
Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click the service you want to get rid of |
On the General tab, Service name: take note of the Service Name not the
Display Name | Close Services
Then open a command prompt...
Start | Run | Type: cmd | Click OK |
Type: sc delete Whateverservice Display Name
and hit Enter
Reboot.
See...
sc delete
here...
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sc.mspx
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In
H
Heirloom
Rootkit Revealer available at www.sysinternals.com .......free. While
you are there, get Process Explorer, also free. It is a great app for
showing exactly what is running on your machine and the amount of cpu cycles
in % used by each.
Heirloom, old and thanks for the assist,
Wes!
you are there, get Process Explorer, also free. It is a great app for
showing exactly what is running on your machine and the amount of cpu cycles
in % used by each.
Heirloom, old and thanks for the assist,
Wes!
Wesley Vogel said:If you have not used RootkitRevealer...
Update your antivirus software and run a full system scan.
Update whatever anti-spyware applications that you have and run a full
system scan with each one.
If you have used RootkitRevealer, it adds a random named *.exe file and a
random named service and runs as that service. The random named *.exe
file
will show up in %userprofile%\Local Settings\Temp folder. Every time you
run
RootkitRevealer it adds another random service to services.msc. The
randomly named *.exe file will be deleted, but the registry settings are
left behind.
[[The reason that there is no longer a command-line version is that
malware
authors have started targeting RootkitRevealer's scan by using its
executable name. We've therefore updated RootkitRevealer to execute its
scan
from a randomly named copy of itself that runs as a Windows service.]]
http://www.sysinternals.com/Utilities/RootkitRevealer.html
RootkitRevealer leaves references to these random named *.exe files behind
so that you see strange service names in services.msc.
If you do not want to mess in the registry, see Alternate method below.
You'll find the left behind services here...
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Locate the service(s) in the list. ImagePath should point to
Local Settings\Temp folder, as a double check.
Delete them and reboot.
[[Important This article contains information about modifying the
registry.
Before you modify the registry, make sure to back it up and make sure that
you understand how to restore the registry if a problem occurs. For
information about how to back up, restore, and edit the registry, click
the
following article number to view the article in the Microsoft Knowledge
Base: 256986 Description of the Microsoft Windows Registry]]
http://support.microsoft.com/default.aspx?kbid=256986
Alternate method To delete a service.
Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click the service you want to get rid of |
On the General tab, Service name: take note of the Service Name not the
Display Name | Close Services
Then open a command prompt...
Start | Run | Type: cmd | Click OK |
Type: sc delete Whateverservice Display Name
and hit Enter
Reboot.
See...
sc delete
here...
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sc.mspx
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
InPaulaDawn said:ULHDBZHW This has shown up in my services? I have googled it and it
doesn't show up? What is it? and if its bad how to get rid of it?
W
Wesley Vogel
I already have Process Explorer and AutoRuns also. ;-)
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In
Heirloom said:Rootkit Revealer available at www.sysinternals.com .......free. While
you are there, get Process Explorer, also free. It is a great app for
showing exactly what is running on your machine and the amount of cpu
cycles in % used by each.
Heirloom, old and thanks for the
assist, Wes!
Wesley Vogel said:If you have not used RootkitRevealer...
Update your antivirus software and run a full system scan.
Update whatever anti-spyware applications that you have and run a full
system scan with each one.
If you have used RootkitRevealer, it adds a random named *.exe file and a
random named service and runs as that service. The random named *.exe
file
will show up in %userprofile%\Local Settings\Temp folder. Every time you
run
RootkitRevealer it adds another random service to services.msc. The
randomly named *.exe file will be deleted, but the registry settings are
left behind.
[[The reason that there is no longer a command-line version is that
malware
authors have started targeting RootkitRevealer's scan by using its
executable name. We've therefore updated RootkitRevealer to execute its
scan
from a randomly named copy of itself that runs as a Windows service.]]
http://www.sysinternals.com/Utilities/RootkitRevealer.html
RootkitRevealer leaves references to these random named *.exe files
behind so that you see strange service names in services.msc.
If you do not want to mess in the registry, see Alternate method below.
You'll find the left behind services here...
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Locate the service(s) in the list. ImagePath should point to
Local Settings\Temp folder, as a double check.
Delete them and reboot.
[[Important This article contains information about modifying the
registry.
Before you modify the registry, make sure to back it up and make sure
that you understand how to restore the registry if a problem occurs. For
information about how to back up, restore, and edit the registry, click
the
following article number to view the article in the Microsoft Knowledge
Base: 256986 Description of the Microsoft Windows Registry]]
http://support.microsoft.com/default.aspx?kbid=256986
Alternate method To delete a service.
Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click the service you want to get rid of |
On the General tab, Service name: take note of the Service Name not the
Display Name | Close Services
Then open a command prompt...
Start | Run | Type: cmd | Click OK |
Type: sc delete Whateverservice Display Name
and hit Enter
Reboot.
See...
sc delete
here...
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sc.mspx
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
InPaulaDawn said:ULHDBZHW This has shown up in my services? I have googled it and it
doesn't show up? What is it? and if its bad how to get rid of it?
H
Heirloom
That was intended for the OP, Wes. However, I have never heard of
AutoRuns......will check into it...........
Heirloom, old and sounds like something
you get from too much Mexican food
AutoRuns......will check into it...........
Heirloom, old and sounds like something
you get from too much Mexican food
Wesley Vogel said:I already have Process Explorer and AutoRuns also. ;-)
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
InHeirloom said:Rootkit Revealer available at www.sysinternals.com .......free.
While
you are there, get Process Explorer, also free. It is a great app for
showing exactly what is running on your machine and the amount of cpu
cycles in % used by each.
Heirloom, old and thanks for the
assist, Wes!
Wesley Vogel said:If you have not used RootkitRevealer...
Update your antivirus software and run a full system scan.
Update whatever anti-spyware applications that you have and run a full
system scan with each one.
If you have used RootkitRevealer, it adds a random named *.exe file and
a
random named service and runs as that service. The random named *.exe
file
will show up in %userprofile%\Local Settings\Temp folder. Every time
you
run
RootkitRevealer it adds another random service to services.msc. The
randomly named *.exe file will be deleted, but the registry settings are
left behind.
[[The reason that there is no longer a command-line version is that
malware
authors have started targeting RootkitRevealer's scan by using its
executable name. We've therefore updated RootkitRevealer to execute its
scan
from a randomly named copy of itself that runs as a Windows service.]]
http://www.sysinternals.com/Utilities/RootkitRevealer.html
RootkitRevealer leaves references to these random named *.exe files
behind so that you see strange service names in services.msc.
If you do not want to mess in the registry, see Alternate method below.
You'll find the left behind services here...
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Locate the service(s) in the list. ImagePath should point to
Local Settings\Temp folder, as a double check.
Delete them and reboot.
[[Important This article contains information about modifying the
registry.
Before you modify the registry, make sure to back it up and make sure
that you understand how to restore the registry if a problem occurs. For
information about how to back up, restore, and edit the registry, click
the
following article number to view the article in the Microsoft Knowledge
Base: 256986 Description of the Microsoft Windows Registry]]
http://support.microsoft.com/default.aspx?kbid=256986
Alternate method To delete a service.
Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click the service you want to get rid of |
On the General tab, Service name: take note of the Service Name not the
Display Name | Close Services
Then open a command prompt...
Start | Run | Type: cmd | Click OK |
Type: sc delete Whateverservice Display Name
and hit Enter
Reboot.
See...
sc delete
here...
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sc.mspx
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In PaulaDawn <[email protected]> hunted and pecked:
ULHDBZHW This has shown up in my services? I have googled it and it
doesn't show up? What is it? and if its bad how to get rid of it?
W
Wesley Vogel
You can spend quite a little time @ www.sysinternals.com just window
shopping. I mean, even if you do not download anything there is plenty of
interesting information.
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In
shopping. I mean, even if you do not download anything there is plenty of
interesting information.
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In
Heirloom said:That was intended for the OP, Wes. However, I have never heard of
AutoRuns......will check into it...........
Heirloom, old and sounds like
something you get from too much Mexican food
Wesley Vogel said:I already have Process Explorer and AutoRuns also. ;-)
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
Inhttp://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sc.mspxHeirloom said:Rootkit Revealer available at www.sysinternals.com .......free.
While
you are there, get Process Explorer, also free. It is a great app for
showing exactly what is running on your machine and the amount of cpu
cycles in % used by each.
Heirloom, old and thanks for the
assist, Wes!
If you have not used RootkitRevealer...
Update your antivirus software and run a full system scan.
Update whatever anti-spyware applications that you have and run a full
system scan with each one.
If you have used RootkitRevealer, it adds a random named *.exe file and
a
random named service and runs as that service. The random named *.exe
file
will show up in %userprofile%\Local Settings\Temp folder. Every time
you
run
RootkitRevealer it adds another random service to services.msc. The
randomly named *.exe file will be deleted, but the registry settings
are left behind.
[[The reason that there is no longer a command-line version is that
malware
authors have started targeting RootkitRevealer's scan by using its
executable name. We've therefore updated RootkitRevealer to execute its
scan
from a randomly named copy of itself that runs as a Windows service.]]
http://www.sysinternals.com/Utilities/RootkitRevealer.html
RootkitRevealer leaves references to these random named *.exe files
behind so that you see strange service names in services.msc.
If you do not want to mess in the registry, see Alternate method below.
You'll find the left behind services here...
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Locate the service(s) in the list. ImagePath should point to
Local Settings\Temp folder, as a double check.
Delete them and reboot.
[[Important This article contains information about modifying the
registry.
Before you modify the registry, make sure to back it up and make sure
that you understand how to restore the registry if a problem occurs.
For information about how to back up, restore, and edit the registry,
click the
following article number to view the article in the Microsoft Knowledge
Base: 256986 Description of the Microsoft Windows Registry]]
http://support.microsoft.com/default.aspx?kbid=256986
Alternate method To delete a service.
Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click the service you want to get rid of |
On the General tab, Service name: take note of the Service Name not
the Display Name | Close Services
Then open a command prompt...
Start | Run | Type: cmd | Click OK |
Type: sc delete Whateverservice Display Name
and hit Enter
Reboot.
See...
sc delete
here...--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In PaulaDawn <[email protected]> hunted and pecked:
ULHDBZHW This has shown up in my services? I have googled it and it
doesn't show up? What is it? and if its bad how to get rid of it?
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.