Re: what is this process?
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 7 Feb 2007 22:03:28 -0600
Google did not show much at all. Try using something like Process Explorer
or Autoruns to see if there is a publisher associated with that process that
may give you a clue what it is. If no publisher name is shown then it
"could" be malware/spyware and a scan for both using the latest definitions
of whatever you scan with would be a good idea. You could also submit the
file to virustotal to see if anything is found.
Steve
http://www.microsoft.com/technet/sysinternals/utilities/ProcessExplorer.mspx
--- Process Explorer
http://www.microsoft.com/technet/sysinternals/utilities/autoruns.mspx --
Autoruns
http://www.virustotal.com/en/indexf.html --- virsutotal
"r. wales" <rwales@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:20AAEDF4-2158-4C9C-80F5-BE84EDE5692A@xxxxxxxxxxxxxxxx
I have found a couple of workstations that have the process CID6LNCH.EXE
running on them. It shows in the reg as
HKLM\software\microsoft\windows\current. the file exists in the windows
directory.
I am unable to find any info in the usual places. Any ideas?
Thanks.
.
- Prev by Date: Re: Blocked access to zipped files
- Next by Date: Re: Windows Firewall
- Previous by thread: Re: 2000 Windows Backup Recovery Utility
- Next by thread: Re: what is this process?
- Index(es):
Relevant Pages
|
