Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

File with random name running in Processes

Posted on 2006-11-30
7
Medium Priority
?
689 Views
Last Modified: 2010-01-21
When checking what processes are running on my WinXP System there is one process which starts from the C:\WINDOWS\TEMP folder that has a different name every time I start the computer. I have WinTasks Pro and it lists the Scotty Dog Icon that is used by the WinPatrol program.  WinRasks Pro does not list any details about the program.  I do not have WinPatrol installed.

I am concerned that it is a malware program but can not find any program that catches it.

I run Windows Defender and Trend Micro Client/Server Security Agent all the time.

I have run SPYBOT, AD-AWARE SE and the Microsoft Malicious Software Removal Tool all of which say that there is no Malware Software on my computer.

Should I be worried about a program that changes it's name every time it runs?

If so, can you suggest a GOOD program to run to find out what it is.

Thanks
0
Comment
Question by:RussellWinterscheidt
7 Comments
 
LVL 47

Accepted Solution

by:
rpggamergirl earned 256 total points
ID: 18051260
Don't worry that random name file is TrendMicro's watchdog!
That is nothing to worry about.
0
 
LVL 47

Expert Comment

by:rpggamergirl
ID: 18051276
That watchdog file acts and behaves like a virus to evade detection from the real viruses that turns off security programs.
0
 
LVL 9

Assisted Solution

by:gopal_krishna
gopal_krishna earned 248 total points
ID: 18051333
Its good that you always be in a safe side by clearing all the temp files and gotostartup and see if there is any unwanted file in the startup. Since any malware or a virus first sits in this location that is temp directory and the startup. In order to be confirmed, please clear all the temp files and then goto run and type MSCONFIG and Startup tab stop all the unwanted applications running. and under accessories please goto system tools and run the diskcleanup and clear all unwanted files on your system.

Secondly goto add and remove programs and remove the files that you feel which you are not using or installed.

Also run the online virus scan and check if you have any malware or adware. I recommend Norton or Macafee

To run online virus scan from norton it is Http://www.sarc.com 

Macafee : http://us.mcafee.com/root/mfs/default.asp

Trend Micro : http://housecall.trendmicro.com/

Online virus scan always provides the complete virus updation and exact results of the computer.

Good luck

Gopal Krishna K
0
 
LVL 28

Assisted Solution

by:burrcm
burrcm earned 248 total points
ID: 18052280
Re the advice from gopal_krishna - do not run anything made by Norton on your PC. Trendmicro is good.

Chris B
0
 
LVL 66

Assisted Solution

by:johnb6767
johnb6767 earned 248 total points
ID: 18055972
2 additional suggestions to add to these here so far....


If you want to get some results from an online scan, you can upload the file to

http://virusscan.jotti.org/ 

To be scanned by multiple AV scanners.....

See if you can find the parent process which spawned it using Process Explorer...

Process Explorer for Windows v10.21
http://www.microsoft.com/technet/sysinternals/utilities/ProcessExplorer.mspx
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you build your web application in Visual Studio you'll get at least a few binaries, or .DLL, files in your bin folder. However, there is more compiling to be done. Normally this would happen when an ASP.NET resource within the web site is request…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…
Suggested Courses

972 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question