Re: cehjdg.exe is driving my mouse mad

From: steve trevanion (anonymous_at_discussions.microsoft.com)
Date: 11/06/03 

Date: Thu, 6 Nov 2003 06:05:10 -0800

>-----Original Message-----
>On Wed, 5 Nov 2003 08:26:30 -0800, "steve trevanion"
><anonymous@discussions.microsoft.com> wrote:
>
>>Hi,
>>
>>Just posting this in the hope that someone else might
>>have had the same problem. I think that my computer is
>>pretty secure, as windows goes, but when I switched it
on
>>today (XP home) my firewall told me that a new program,
>>(c:\windows\cehjdg.exe) was trying to access the
>>internet. Mmmmm.... OK I don't know what this is or
where
>>on earth it has come from (PC was fine yesterday) so
>>say "no". Computer hangs for 2-3 minutes, then seems
OK,
>>except that the single or double mouse click to open
>>applications doesn't work - rather it open properties.
So
>>to open applications I have to right click and then
>>select open. And of course the submit button on web
forms
>>don't work either. Grr...
>>
>>To get around this I have:
>>1) rebooted, no joy
>>2) ran ad-aware (upto date ver 6), no joy
>>3) done antivirus scan (upto date Norton AV), no joy
>>4) ran norton windows doctor, no joy
>>5) searched google and microsoft web site
>>for "cehjdg.exe.", nothing found
>>5) tried to delete the file - already in use.
>>6) went to safe mode and deleted file OK. Computer now
>>seems to be working OK
>>
>>Strange, but although the file was marked as being
>>created today, through explorer it has a timestamp of
>>22/6/02, 08:17.
>>
>>Anyone come across this problem? My computer is working
>>fine at present which is the main thing of course, but
>>I'd really like to know what is going on.
>>
>>Steve
>Seems like you may have cured it, but you should look in
msconfig
>and use the registry editor to see if you can find a
reference
>To it. Is it possible you got infected thru an email?
>Here's a good inline scan:
>http://www.pandasoftware.com/activescan/com/
>turn on all the options, including heuristic.
>Dave
>.
>
Thanks Dave - no reference to the file in the windows
startup files or the registry. Weird. Could possibly have
come from an email I guess but I have up to date Norton
AV which should have intercepted it or found it I'd have
thought.
Not sure about the panda soft software yet - will have to
check out whether it could interfere with the NAV or add
anything that NAV might miss.
Cheers,
Steve