xdqkoxhk.exe ?? - Tilted Forum Project Discussion Community

JStrider · 07-21-2004, 12:09 PM

ok so i noticed this process running on my computer today... couldnt figure out what it does... nothing seemed to happen when i closed it... and ive also got the file in my windows/system32 directory...

anyone know what this file is/does...

i do have an up to date virus scanner... so i doubt its anything to do with that...

i googled for it and couldnt find it...

the_marq · 07-21-2004, 12:15 PM

I'd delete it, or at the very least change it's extention to something else to disable it from running.

If it's not on google it's almost definately something bad.

sailor · 07-21-2004, 01:43 PM

Quote:

Originally posted by the_marq
I'd delete it, or at the very least change it's extention to something else to disable it from running.

If it's not on google it's almost definately something bad.

Good advice. Try killing it and seeing if there are any adverse effects. If no, Id delete it. If it were a process needed by windows, Google would have turned up something on it.

JStrider · 07-21-2004, 01:50 PM

didnt seem to be any adverse effects when i killed it... so for now its been renamed to xdqkoxhk.exe.wtf

i'll delete it eventually if there doesnt seem to be any problems with not running it

hrdwareguy · 07-21-2004, 02:14 PM

Some adware stuff will give files random names just like some viruses do. Might try that.

soopafreek · 07-21-2004, 06:23 PM

most likely malware.

do a housecall scan. even if you have up-to-date virus definitions.

JStrider · 07-21-2004, 07:32 PM

i downloaded that kaspersky virus scanner and it recognized it as some kind of trojan.... that kaspersky is awesome...

txd · 07-23-2004, 03:17 AM

Check out http://www.virustotal.com/flash/index_en.html

It is a great service, you email them the file you think may be infected and they scan it with multiple virus scanners and send you the results.

As you can see from the results below only 4 out of 12 scanners found a virus.

Scan results
File: bafaeac.exe
Date: 07/22/2004 11:41:52
----
BitDefender 7.0/20040722 found nothing
ClamWin devel-20040719/20040722 found [Worm.Gaobot.IK.2-unp]
eTrustAV-Inoc 4641/20040721 found nothing
F-Prot 3.15/20040721 found nothing
Kaspersky 4.0.2.23/20040722 found nothing
McAfee 4380/20040721 found nothing
NOD32v2 1.819/20040722 found [probably unknown NewHeur_PE]
Norman 5.70.10/20040722 found nothing
Panda 7.02.00/20040722 found nothing
Sybari 7.5.1314/20040722 found [Win32.Agobot.gen]
Symantec 8.0/20040721 found [W32.Gaobot.AFJ]
TrendMicro 7.000/20040719 found nothing

07-21-2004, 12:09 PM	#1 (permalink)
JStrider Poo-tee-weet? Location: The Woodlands, TX	xdqkoxhk.exe ?? ok so i noticed this process running on my computer today... couldnt figure out what it does... nothing seemed to happen when i closed it... and ive also got the file in my windows/system32 directory... anyone know what this file is/does... i do have an up to date virus scanner... so i doubt its anything to do with that... i googled for it and couldnt find it... __________________ -=JStrider=- ~Clatto Verata Nicto

07-21-2004, 12:15 PM	#2 (permalink)
the_marq All hail the Mountain King Location: Black Mesa	I'd delete it, or at the very least change it's extention to something else to disable it from running. If it's not on google it's almost definately something bad. __________________ The Truth: Johnny Cash could have kicked Bruce Lee's ass if he wanted to. #3 in a series

07-21-2004, 01:50 PM	#4 (permalink)
JStrider Poo-tee-weet? Location: The Woodlands, TX	didnt seem to be any adverse effects when i killed it... so for now its been renamed to xdqkoxhk.exe.wtf i'll delete it eventually if there doesnt seem to be any problems with not running it __________________ -=JStrider=- ~Clatto Verata Nicto

07-21-2004, 02:14 PM	#5 (permalink)
hrdwareguy "Officer, I was in fear for my life" Location: Oklahoma City	Some adware stuff will give files random names just like some viruses do. Might try that. __________________ Gun Control is hitting what you aim at Aim for the TFP, Donate Today

07-21-2004, 06:23 PM	#6 (permalink)
soopafreek Psycho Location: ask your mom	most likely malware. do a housecall scan. even if you have up-to-date virus definitions. __________________ aaarrrrrgggghhhh!!!!

07-21-2004, 07:32 PM	#7 (permalink)
JStrider Poo-tee-weet? Location: The Woodlands, TX	i downloaded that kaspersky virus scanner and it recognized it as some kind of trojan.... that kaspersky is awesome... __________________ -=JStrider=- ~Clatto Verata Nicto

07-23-2004, 03:17 AM	#8 (permalink)
txd Addict	Check out http://www.virustotal.com/flash/index_en.html It is a great service, you email them the file you think may be infected and they scan it with multiple virus scanners and send you the results. As you can see from the results below only 4 out of 12 scanners found a virus. Scan results File: bafaeac.exe Date: 07/22/2004 11:41:52 ---- BitDefender 7.0/20040722 found nothing ClamWin devel-20040719/20040722 found [Worm.Gaobot.IK.2-unp] eTrustAV-Inoc 4641/20040721 found nothing F-Prot 3.15/20040721 found nothing Kaspersky 4.0.2.23/20040722 found nothing McAfee 4380/20040721 found nothing NOD32v2 1.819/20040722 found [probably unknown NewHeur_PE] Norman 5.70.10/20040722 found nothing Panda 7.02.00/20040722 found nothing Sybari 7.5.1314/20040722 found [Win32.Agobot.gen] Symantec 8.0/20040721 found [W32.Gaobot.AFJ] TrendMicro 7.000/20040719 found nothing