What is wallpe.exe?

  • Thread starter Thread starter cajunswabbie
  • Start date Start date
C

cajunswabbie

I found wallpe.exe in my WIN XP Home (SP-2), C:\Windows folder. The Icon is
of a Yellow Haired Cartoon Girl with Purple Bows in her pigtails. I did a
Google search, and the only page that turned up was this one:
http://xenia.sote.hu/ftp/dos_win/msdos/ujsag/comp_pan/9512/ . The only
information it had was at the top it read "Index of
/ftp/dos_win/msdos/ujsag/comp_pan/9512" then at the bottom of the page it
had wallpe#.exe (updated 7 Nov 1995). Is this a legitimate DOS or Windows
file? If so what does it do?

Thanks in advance.

Cajunswabbie
USN (Retired)
 
cajunswabbie said:
I found wallpe.exe in my WIN XP Home (SP-2), C:\Windows folder. The Icon is
of a Yellow Haired Cartoon Girl with Purple Bows in her pigtails. I did a
Google search, and the only page that turned up was this one:
http://xenia.sote.hu/ftp/dos_win/msdos/ujsag/comp_pan/9512/ . The only
information it had was at the top it read "Index of
/ftp/dos_win/msdos/ujsag/comp_pan/9512" then at the bottom of the page it
had wallpe#.exe (updated 7 Nov 1995). Is this a legitimate DOS or Windows
file? If so what does it do?

Thanks in advance.

Cajunswabbie
USN (Retired)
Click to expand...

Nope, not part of Windows XP.
 
Rock said:
Nope, not part of Windows XP.
Click to expand...

Thanks for the quick response. Think I will move it to another folder and
see if it affects anything.

Cajunswabbie
USN (Retired)
 
cajunswabbie said:
Thanks for the quick response. Think I will move it to another folder and
see if it affects anything.

Cajunswabbie
USN (Retired)
Click to expand...

You're welcome. That's a good approach. Any grand kids use the
computer recently? Good luck.
 
From: "cajunswabbie" <[email protected]>


| Thanks for the quick response. Think I will move it to another folder and
| see if it affects anything.
|
| Cajunswabbie
| USN (Retired)
|

Do so and also... Please submit a sample of "wallpe.exe" to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.

You can also submit a suspect, one at a time, via the following email URL...
mailto:[email protected]?subject=SCAN

When you get the report, please post back the exact results.
 
Do so and also... Please submit a sample of "wallpe.exe" to Virus
Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's
scanners.
That will give you an idea what it is and who recognizes it. In addition,
unless told
otherwise, Virus Total will provide the sample to all participating
vendors.

You can also submit a suspect, one at a time, via the following email
URL...
mailto:[email protected]?subject=SCAN

When you get the report, please post back the exact results.
Click to expand...
Thanks for the link Dave. I added it to my favorites for future use. Only
Fortinet found it suspicious. Here is the report copied and pasted from
VirusTotal.

This is a report processed by VirusTotal on 01/12/2006 at 04:23:34 (CET)
after scanning the file "wallpe.exe" file.

Antivirus Version Update Result
AntiVir 6.33.0.77 01.11.2006 no virus found
Avast 4.6.695.0 01.11.2006 no virus found
AVG 718 01.11.2006 no virus found
Avira 6.33.0.77 01.11.2006 no virus found
BitDefender 7.2 01.12.2006 no virus found
CAT-QuickHeal 8.00 01.11.2006 no virus found
ClamAV devel-20051123 01.11.2006 no virus found
DrWeb 4.33 01.12.2006 no virus found
eTrust-Iris 7.1.194.0 01.12.2006 no virus found
eTrust-Vet 12.4.1.0 01.11.2006 no virus found
Ewido 3.5 01.11.2006 no virus found
Fortinet 2.54.0.0 01.12.2006 suspicious
F-Prot 3.16c 01.11.2006 no virus found
Ikarus 0.2.59.0 01.11.2006 no virus found
Kaspersky 4.0.2.24 01.12.2006 no virus found
McAfee 4672 01.11.2006 no virus found
NOD32v2 1.1362 01.11.2006 no virus found
Norman 5.70.10 01.11.2006 no virus found
Panda 9.0.0.4 01.11.2006 no virus found
Sophos 4.01.0 01.11.2006 no virus found
Symantec 8.0 01.12.2006 no virus found
TheHacker 5.9.2.071 01.10.2006 no virus found
UNA 1.83 01.12.2006 no virus found
VBA32 3.10.5 01.11.2006 no virus found


Cajunswabbie
US Navy (Retired)
 
If you right click the file and look at its version comments, the value
is "Changes wallpaper to Emachines". Of course that doesn't mean it
couldn't be a disguised virus/malware file, but I run an Emachines
system and good money says that you probablly do, too. If not, then...
that's more suspicious that I'd care to imagine. I also can't think of
why the file is represented as a girl, but maybe someone at the
Emachines sofware division just has a sense of humor.
 
Back
Top