hijacked by cpa.exe? (ht log included) (page 2)

sarasara · 2011-02-18T10:55:58+00:00

Hi Techs, When closing my PC last night I was asked to 'end now' the program CPA.EXE I searched for the file but it did not come up. Grateful for further advice, Thanks, sara. win xp professional intel core 2 duo cpu E8400@3.00 ghz 3.00 ghz. 3.00 gb ram Onboard: comodo internet security (full scan did not detect). comodo registry cleaner malaware bytes winpatrol free spywareblaster cc cleaner (info I found which may be true and which I'm sure you are already aware of: "CPA.EXE has been seen to perform the following behavior: (Origin: China). Enables an In Process Object/Server - Common with DLL Injections Adds a Registry Key (EXPLORER) to auto start Programs on system start Boot up This process creates other processes on disk Writes to another Process's Virtual Memory (Process Hijacking) This Process Deletes Other Processes From Disk The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen c

sarasara

February 23, 2011, 9:08 PM UTC

Just posted

deltalima

February 23, 2011, 9:43 PM UTC

Hi sarasara,

Now that you are clean, please follow these steps in order to keep your computer clean and secure.

Clean up with OTM

Double-click OTM.exe to start the program. This will remove all the tools we used to clean your pc.
Close all other programs apart from OTM as this step will require a reboot
On the OTM main screen, press the CleanUp! button
Say Yes to the prompt and then allow the program to reboot your computer.

Update your AntiVirus Software and keep your other programs up-to-date
Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.
You can use one of these sites to check if any updates are needed for your pc.
Secunia Software Inspector
F-secure Health Check

Security Updates for Windows, Internet Explorer & Microsoft Office
Whenever a security problem in its software is found, Microsoft will usually create a patch so that after the patch is installed, attackers can't use the vulnerability to install malicious software on your PC. Keeping up with these patches will help to prevent malicious software being installed on your PC. Ensure you are registered for Windows updates via Start > right-click on My Computer > Properties > Automatic Updates tab or visit the Microsoft Update site on a regular basis.

Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.

A tutorial on installing & using this product can be found here:

Using SpywareBlaster to protect your computer from Spyware and Malware

Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.Follow this list and your potential for being infected again will reduce dramatically.

Here are some additional utilities that will enhance your safety

MVPS Hosts file <= The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer
Winpatrol <= Download and install the free version of Winpatrol. a tutorial for this product is located here:
Using Winpatrol to protect your computer from malicious software