Farmmext.exe & lrvetji.exe - Viruses?

From: me_siyer (mesiyer_at_discussions.microsoft.com)
Date: 03/30/05 

Date: Tue, 29 Mar 2005 22:03:02 -0800

Hi,

I run on Win2k with all uptodate SP&updates. Recently I have found
Farmmext.exe and Lrvetji.exe in the registry and the system also runs a bit
slow. These two files are located as c:\winnt\farmmext.exe and
c:\winnt\system32\lrvetji.exe. As I checked for these strings. Whereas
Lrvetji.exe is a single file, farmmext containts 8 files including
farmmext.zip. I started the system under safe mode, deleted all these string
but in no time I find them again. I feel this is some sort of an adware or
virus and can anyone help me out. Thanks.

Relevant Pages

  • The certification password of Internet Explorer 7 and operation of auto complete
    ... About the certification password of Internet Explorer and operation ... By remembering the strings that are input in the following text ... In this registry, there are values whose name is a string of 42 bytes ... We cannot guess the original strings from the hash value, ...
    (Bugtraq)
  • dynamic module loading via __import__, nonetype?
    ... I'm trying to create a setup which allows a program to request an object ... using strings and get an object of that type. ... I have a registry class which has a method to register a class. ...
    (comp.lang.python)
  • Help with MAPI properties please.
    ... I've got a problem with MAPI properties. ... DoConfigPropsheet does an OpenProperty on the data associated with the ... UNICODE are not defined; all strings ... // The code enumerates registry entries, ...
    (microsoft.public.win32.programmer.messaging)
  • Re: Windows XP Welcome Screen
    ... assigning a password should prevent automatic logon. ... Microsoft MVP [Windows XP Shell/User] ... After I deleted all the strings in the registry, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Windows XP Welcome Screen
    ... Configuration that worked. ... Once you are at the desktop, use your Browser and ... After I deleted all the strings in the registry, ...
    (microsoft.public.windowsxp.help_and_support)