moynhu.exe

[HelpV]

One of my coworkers was complaining about his computer running slow. I went into Task Manger and found this process running, moynhu.exe. When you stop the process it keeps poping up again. I booted the PC into safemode and deleted the file and registry entry. I found this same file running on another coworkers PC last week.
Does anyone have any information on this file or where it came from?

 

[aquias]

Nothing comes up via a Google search. Most likely it is a random name generated by some kind of critter.

My advice...

Download and run Microsoft Antispyware Beta
Spybot Search and Destroy
Connect to

http://housecall.trendmicro.com

and run their full scan.

Then download and run Hijack this, posting the log here for some assistance in tearing it apart.

 

[pechenegs]

try ewido in safe mode.




* Download the trial version of Ewido Security Suite here

http://www.ewido.net/en/

* Install ewido.
* During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
* Launch ewido
* It will prompt you to update click the OK button and it will go to the main screen
* On the left side of the main screen click update
* Click on Start and let it update.
* DO NOT run a scan yet. You will do that later in safe mode.



* Click here for info on how to boot to safe mode if you don't already know
how.


How to boot to safe mode

http://service1.symantec.com/SUPPOR...2001052409420406?OpenDocument&src=sec_doc_nam

* Now copy these instructions to notepad and save them to your desktop. You
will need them to refer to in safe mode.


* Restart your computer into safe mode now. Perform the following steps in
safe mode:


* Now run Ewido:

* Click on scanner
* Put a check by the following before you scan:
o Binder
o Crypter
o Archives
* Click the Start Scan button to start the scan.
* During the scan it will prompt you to clean files, click OK
* When the scan is finished, look at the bottom of the screen and click the Save report button.
* Save the report to your desktop



download and run ccleaner.

http://www.ccleaner.com/