Weird Application Problem

[Guest]

Does anyone know what this application is: mhqtyj.exe

It is in the Windows/System32 directory and everytime I boot the computer up
my firewall comes up saying it wants to access the internet. So I block it
but it keeps coming up. I tried moving it but it will not let me.

Any ideas?

Jeff

 

[CWatters]

Does anyone know what this application is: mhqtyj.exe

It is in the Windows/System32 directory and everytime I boot the computer up
my firewall comes up saying it wants to access the internet. So I block it
but it keeps coming up. I tried moving it but it will not let me.

That program isn't listed on this web site....

http://www.sysinfo.org/startuplist.php

...which _probably_ means its adware/spyware. Perhaps it's trying to get the
adverts to display on your screen or download it's friends. You are very
wise to block it.

I recommend running..

Spybot Search and Destroy. It's free but ONLY get it from here...
http://www.safer-networking.org

Also try this...

CTRL+ALT+DEL and select the Processes Tab

If mhqtyj.exe is listed right click on it and select End Process. Then...

Start -> Run -> type "msconfig" without the quote marks and press enter.
A new window will open. Look at the start tab and see what processes are
running.
Remove the check mark from mhqtyj.exe if you find it there.
Then try deleting it in Windows/System32.

Then reboot and see if it comes back. If it does come back there maybe other
processes running that are repairing it!

Post again here.

Colin

 

[Rock]

Does anyone know what this application is: mhqtyj.exe

It is in the Windows/System32 directory and everytime I boot the computer up
my firewall comes up saying it wants to access the internet. So I block it
but it keeps coming up. I tried moving it but it will not let me.

Any ideas?

Jeff

No hits in google which suggests malware. Run these programs to check
for spyware/malware. After installing update them, then boot into safe
mode and run them. You should update and run them weekly.

Cwshredder
http://www.intermute.com/spysubtract/cwshredder_download.html

Ad-aware SE
http://www.lavasoftusa.com

Spybot Search and Destroy
http://www.safer-networking.org

Bazooka Adware and Spyware Scanner
http://download.com.com/3000-2144-10247783.html

Pest Patrol Free Pest Scanner
http://www.pestscan.com/ScanOrTrial.asp

If you’re still having problems after running these then run HijackThis
and post the log to one of the specialty forums, _NOT_ this one.

HijackThis
http://www.majorgeeks.com/download.php?det=3155

Forums to Interpret HijackThis Logs:

http://www.spywareinfo.com/forums/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

After your system is clean use these programs to help keep it clean:

Spywareblaster
www.javacoolsoftware.com/sbdownload.html

Spywareguard
http://www.javacoolsoftware.com/sgdownload.html

IE-SPYAD
http://www.staff.uiuc.edu/~ehowes/resource.htm

 

[Jeff Walters]

That program isn't listed on this web site....

http://www.sysinfo.org/startuplist.php

..which _probably_ means its adware/spyware. Perhaps it's trying to get the
adverts to display on your screen or download it's friends. You are very
wise to block it.

I recommend running..

Spybot Search and Destroy. It's free but ONLY get it from here...
http://www.safer-networking.org

Also try this...

CTRL+ALT+DEL and select the Processes Tab

If mhqtyj.exe is listed right click on it and select End Process. Then...

Start -> Run -> type "msconfig" without the quote marks and press enter.
A new window will open. Look at the start tab and see what processes are
running.
Remove the check mark from mhqtyj.exe if you find it there.
Then try deleting it in Windows/System32.

Then reboot and see if it comes back. If it does come back there maybe other
processes running that are repairing it!

Post again here.

Colin

Hi Colin,

I ran Spybot and it did a great job of finding all sorts of things
that my Spyware Nuker did not. However, it did not eliminate this
particular file.

Jeff

 

[CWatters]

When you say it won't let you what happens when you try? Does it give an
access permission error message..

http://support.microsoft.com/default.aspx?scid=kb;en-us;308421&sd=tech

or do you get a copy but then it recreates itself in the original place
instantly?

 

[Jeff Walters]

When you say it won't let you what happens when you try? Does it give an
access permission error message..

http://support.microsoft.com/default.aspx?scid=kb;en-us;308421&sd=tech

or do you get a copy but then it recreates itself in the original place
instantly?

What it says is that I can not move, copy, or delete it because it is
in use by another program.

Jeff

 

[CWatters]

What it says is that I can not move, copy, or delete it because it is

in use by another program.

Did you find and stop it running using the task manager? If that didn't
work..

You could try booting in safe mode and see if you can delete it from there.

 

[Jeff Walters]

Did you find and stop it running using the task manager? If that didn't
work..

You could try booting in safe mode and see if you can delete it from there.

It is gone now. For some reason when I first went into mscnfg and
unchecked the file, it still remained in the start up. So I did it
again and now it is not a problem. I do see a lot of stuff in there
that makes references to old programs I no longer use. I am thinking
of just formating the hard drive and re-installing Win XP. I am not
savy enough to go in and do clean-up in the reg and other system
areas.

Thanks A Million for your help.

Jeff