troubleshooting Question

Possible virus ? c:\winnt\temp

Avatar of quippee
quippee asked on
Windows 2000
3 Comments1 Solution491 ViewsLast Modified:
I just noticed a proccess running on a windows 2000 proffessional. When I run Hijackthis I see that the process is using a file in c:\winnt\temp\cud9ee.exe
I cannot end the process but i can rename and delete the .exe file , When I reboot it will create a different file name in c:\winnt\temp directory and its smart enough to have a different creating date.  the icon for the exe file is brown lil puppy , has anyone seen this before?
Join our community to see this answer!
Unlock 1 Answer and 3 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 3 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros