Re: pdhepl40.exe
From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 10/24/05
- Next message: Malke: "Re: pdhepl40.exe"
- Previous message: Donald Boelling: "pdhepl40.exe"
- In reply to: Donald Boelling: "pdhepl40.exe"
- Next in thread: Malke: "Re: pdhepl40.exe"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 24 Oct 2005 13:19:53 -0400
From: "Donald Boelling" <boelling@teleport.com>
| I found a process on my system that is running. It is very strange and
| I do not know what it is. Here are the facts...
|
| Filename: pdhepl40.exe
|
| It is in c:\windows\system32
| It is a hidden file and can not be unhidden
| It can not be seen, even in dos mode
| Even XP Task Manager does not see it running
| It listens on port 1044
|
| I would not even have known about it except I was testing another
| third party task manager called "Security Task Manager" which can see
| the process and file.
|
| Anyone have any info on it?
Please submit a sample of "pdhepl40.exe" to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against 18 different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.
When you get the report, please post back the exact results.
-- Dave http://www.claymania.com/removal-trojan-adware.html http://www.ik-cs.com/got-a-virus.htm
- Next message: Malke: "Re: pdhepl40.exe"
- Previous message: Donald Boelling: "pdhepl40.exe"
- In reply to: Donald Boelling: "pdhepl40.exe"
- Next in thread: Malke: "Re: pdhepl40.exe"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
