What is YIH0L80A.EXE

[Guest]

I recently found the file YIH0L80A.EXE running in my task list. On a couple
of occasions I've found 3 or 4 instances of it running, but I can't find any
information as to what the file is or what it is associated with. A search
of my hard drive only found the file in the c:\windows\prefetch directory,
but I can't find were the actual file is located.

Any help/suggestions?

 

[PA Bear]

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

 

[dobey]

I recently found the file YIH0L80A.EXE running in my task list. On a
couple
of occasions I've found 3 or 4 instances of it running, but I can't find
any
information as to what the file is or what it is associated with. A
search
of my hard drive only found the file in the c:\windows\prefetch directory,
but I can't find were the actual file is located.

Any help/suggestions?

Might be malware, virus, trojan that generates random filenames for its
self.

Does your PC seem to be working OK?

This utility might be able to help you locate the exe and give you more
information.
http://www.microsoft.com/technet/sysinternals/utilities/processmonitor.mspx


This one will give you lots of info.
http://www.microsoft.com/technet/sysinternals/Utilities/ProcessExplorer.mspx


Of course it could be some totally harmless file, but if it was something
installed by another program, chances are someone else would have already
asked your question, and it would have been documented.

Search this group or the net for links to virus, malware, trojan removal and
diagnostics.

 

[Laughingstar~*]

Wow, Pa Bear, that's a post-full! Now I'm more nervous. ;0))

 

[Pegasus \(MVP\)]

I recently found the file YIH0L80A.EXE running in my task list. On a
couple
of occasions I've found 3 or 4 instances of it running, but I can't find
any
information as to what the file is or what it is associated with. A
search
of my hard drive only found the file in the c:\windows\prefetch directory,
but I can't find were the actual file is located.

Any help/suggestions?

While it could be a virus, it could also be a virus scanning file. I recall
that Trend Internet Security used to generate such randomly named files
and place them into the %temp% directory. The purpose behind the
idea was to make it harder for viruses to knock out the virus scanner
software. What virus scanner do you use?