weird things in prefetch

[Guest]

Found these two things in prefectch
gearprof.exe-10a67f71.pf
ntokbdhu.exe-063e965e.pf

I am getting an Internet explorer has encountered a problem and needs to
close, we are sorry for the inconvenience
if you were in the middle of something, the informatio you were working on
might be lost. error..
in event viewer the error points to gearprof.exe I cannot find this file
anywhere!! I have run numerous spy and virus scans and searches. I google
searched for the file and no results.... I have hijacked this'd ..... It
comes up over and over Help!!!
Thanks, Deborah www.acecomputerguy.com

 

[Fitz]

Delete all files in the Prefetch folder. Don't delete the folder itself.
Windows will rebuild the folder on the next restart.
***

 

[Guest]

I had tried that already, they come right back.. any idea where I should look
to find the offender placing the files there?
--
Deborah Owner ACE Computer Guy

Delete all files in the Prefetch folder. Don't delete the folder itself.
Windows will rebuild the folder on the next restart.
***

 

[Guest]

it is system problem by the way, I created a new profile hoping that I
could just copy my docs.... to the new profile, but it happens on a fresh
profile opening for the first time.

Deborah Owner ACE Computer Guy

Delete all files in the Prefetch folder. Don't delete the folder itself.
Windows will rebuild the folder on the next restart.
***

 

[Ronnie Vernon MVP]

it is system problem by the way, I created a new profile hoping that I
could just copy my docs.... to the new profile, but it happens on a
fresh profile opening for the first time.

Deborah Owner ACE Computer Guy

Open the Event Viewer, double click the event that shows this error and then click the Copy icon. Paste that in a reply here.

Also recommended: Go to the following website.

AumHa Forums:
http://forum.aumha.org/index.htm

Click the Register link and sign up for forum membership (Free). Next, go to the "Hijack This Logs" forum. Leave the website open.

Go to where you saved the latest HijackThis log and double click the file, it will open in Notepad. Copy the contents of the log.

Return to the forum website and create a new message. Describe the problem you are having and paste the hijackthis log into the message. There are experts there that will be able to decipher the log and suggest causes/remedies.

 

[Fitz]

Have you run comprehensive virus and malware scans in Safe Mode?

***

it is system problem by the way, I created a new profile hoping that I
could just copy my docs.... to the new profile, but it happens on a fresh
profile opening for the first time.

Deborah Owner ACE Computer Guy

 

[Wesley Vogel]

Update your antivirus software and run a full system scan.

These two prefetch files gearprof.exe-10a67f71.pf and
ntokbdhu.exe-063e965e.pf indicate that gearprof.exe and ntokbdhu.exe have
run on your machine at least once each.

If gearprof.exe-10a67f71.pf and ntokbdhu.exe-063e965e.pf reappear in the
Prefetch folder after being deleted, this means that gearprof.exe and
ntokbdhu.exe are still on your machine.

A Google search for gearprof.exe and ntokbdhu.exe finds nothing. This is a
good indication that gearprof.exe and ntokbdhu.exe are part of a virus or
some other type of malware.

Also update and run any anti-spyware applications that you have.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

I have run 5 different updated spyware programs in all profiles (5) on one
machine and (4) on the other. (spybot, spysweeper, adaware, spysubtract, MS
Antispyware, I ran hijack this and removed suspicious entries, I manually
cleaned all temp files and ran a registry cleaner ) I manually deleted files
that scans would not remove I run them in safe mode and then again in regular
mode to make sure system is truley clean I ran an updated virus scan with AVG
anti virus both in regular and safe mode. All scans come up clean (usually
when I have a problem like this ,the scans will keep popping up problems no
matter how many times I run them.....
Most recent , tried to do a windows repair, no luck!!
Im going to have to cop out and do a reload, I have had these two PCs for
over a week.
Thanks for trying!

 

[Ronnie Vernon MVP]

I have run 5 different updated spyware programs in all profiles (5) on one
machine and (4) on the other. (spybot, spysweeper, adaware, spysubtract,
MS
Antispyware, I ran hijack this and removed suspicious entries, I manually
cleaned all temp files and ran a registry cleaner ) I manually deleted
files
that scans would not remove I run them in safe mode and then again in
regular
mode to make sure system is truley clean I ran an updated virus scan with
AVG
anti virus both in regular and safe mode. All scans come up clean (usually
when I have a problem like this ,the scans will keep popping up problems
no
matter how many times I run them.....
Most recent , tried to do a windows repair, no luck!!
Im going to have to cop out and do a reload, I have had these two PCs for
over a week.
Thanks for trying!

A reinstall may be your best option in this case. If you do find out where
these 2 files came from, please post a follow up message here.