ibfpxu.exe

[Dollie]

Anyone heard of this program "ibfpxu.exe"?

I had a client computer with this file in the /WINNT/ directory on a Win2K machine, and the computer was lagging to the point nothing was operating properly. A search on google, here, and various other search engines turned up nothing, zip, zero, zilch.

My first real mystery.........

 

[carrr]

Random names generally = trouble.
I'd remove it.
Come in under safe mode and delete it.
It would probably be advisable to run Hijack This! on the machine in question and post the log back here. (

http://www.tomcoyote.org/hjt/)

I'd be willing to bet that that's not the only problem on the pc.

Tired of waiting for an answer? Try asking better questions. See: faq222-2244

 

[Dollie]

As a follow-up.......

It turned out to be a piece of malware. We have no idea what spawned it. Turned out the PC in question had several bits and pieces of garbage (read: a LOT of you-know-what) that we were able to eliminate using Spybot and Adaware.

I thought I was fairly on top of things as far as this malware goes, but I guess I didn't stop to think that one would just be randomly creating names for itself!

Thanks!

 

[diogenes10]

Thanks for posting back.

You would still be well-advised to run hijackthis and carefully evaluate the items in the log. Sometimes things remain after cleaning with spybot and adaware. Carefully, because valid file names can be used in invalid locations, or sometime file names are carefully crafted to look right when they are in fact bad.

-------------------------------------
It's 10 O'Clock ( somewhere! ).
Are your registry and data backed up?

 

[Dollie]

Thanks for the tip! I haven't used HJT yet, so I think I'll set up a guinea pig machine and get it online without a firewall for a bit. Then I'll set about the learning process.

Thanks again!

 

[diogenes10]

http://www.bleepingcomputer.com/for...64934da220c5e462&act=Tutorials&CODE=01&CID=38

Good tutorial

Also be sure you're working with current version (1.98.2)

1.98 series displays additional info that 1.97 series doesn't.

-------------------------------------
It's 10 O'Clock ( somewhere! ).
Are your registry and data backed up?