Suspicious processes?

[GoldenHaddock]

Hi,

I have several instances of a process called "kb9zmp.exe" running. I have not noticed this before and it's got my suspicious.

I have scanned with AVG and Trend Micro Housecall and found nothing, I have also ran a most recent version of stinger and again found nothing.

Should I be concerned? What else can I do?

Also does anyone know this is:

msnmesengers.exe

(yes, there is only one S in the process name which is also suspicious)

I thought AVG was an excellent scanner - is it possible that it's missing something?

Thanks

 

[BionicJohn]

Hi, GoldenHaddock,

This thread may help: thread760-1029496.

Iechyd da! John
Glannau Mersi, Lloegr.

 

[MasterRacker]

Follow the steps in faq608-4650. You probably have some type of spyware or hijacker going. AVG is an excellent scanner however it's and anti-virus program. None of the anti-virus programs do much with spyware/adware/hijackers as those are a different animal and require different tools.

Good luck.

[purple]Jeff
It's never too early to begin preparing for [/purple]International Talk Like a Pirate Day

 

[LloydSev]

Also there are a # of online scanners to use that may pick stuff up that others don't (just like adware and spyware scanners)

such as :

http://www.pandasoftware.com/

and

http://www.ravantivirus.com/

Both are good online scanners along side trendmicro's housecall.

Computer/Network Technician
CCNA

 

[TomCologne]

You're right about "msnmesengers.exe", see here:

http://www.sophos.com/virusinfo/analyses/w32rbotme.html

Info on Task List programs:

http://www.answersthatwork.com/Tasklist_pages/tasklist.htm

I don't know what "kb9zmp.exe" is, but Google did not return any results which, in my experience, indicates that it is probably not malware.

You should not only have a Virus scanner, but also some Spyware utilities.
I use MS Antispyware, Spybot S&D and Ad-Aware SE, all free!


TomCologne

 

[GoldenHaddock]

Hi guys,

Thanks for the advice.

Good point MasterRacker, I just assumed it would be a virus, never thought that it could be spyware

I also use SpyBot and AdWare, which did not seemingly find this.

I used the Security Control Panel along with Mike Lin's Startup Control Panel and quarantied the suspicious processes and stopped them from starting in the first place.

I located the "kb9zmp.exe" file and removed it manually.

Since then it doesn't seem to be running so I think i've caught it!

I checked all the other running processes and they are all genuine, so I think i'm clean once again.

Thanks!