This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

00a - chrisglew

1 min read

This thread's last reply is from November 20, 2009, 9:39 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

chrisglew
November 15, 2009, 1:30 PM UTC
Was slightly unsure how to proceed with this - I did some internet/forum searching to find the answers to these questions. Some however I couldn't find anything of use on, so I said I was unsure of them. I presume this was correct. :)

Running processes:
C:\Windows\system32\taskhost.exe
Hosts DLL processes instead of those that run via exes.

C:\Windows\System32\rundll32.exe
Runs dlls as applications (basically). Not to be deleted.

C:\Windows\system32\taskeng.exe
Task scheduler engine – triggers events based on criteria (log on, startup, etc)

C:\Windows\system32\Dwm.exe
Desktop Window Manager. Controls display and the (beloved) Aero effects in Vista and Win 7.

C:\Windows\Explorer.EXE
The Windows GUI for exploring files and folders.

C:\Program Files\XeroBank\App\bin\xbvpn-gui.exe
The GUI for my VPN.

C:\Program Files\Secunia\PSI\psi.exe
Secunia is a program that scans your computer for vulnerabilities and out of date/unpatched software.

C:\Program Files\XeroBank\App\bin\openvpn.exe
Again, related to my VPN.

C:\Windows\system32\conhost.exe
Fixes the issues Vista had with console windows and drag and drop.

C:\Windows\System32\igfxtray.exe
Related to the Intel Graphics drivers.

C:\Windows\system32\igfxsrvc.exe
Another intel graphics program

C:\Windows\System32\hkcmd.exe
Config and diagnostics for Intel components

C:\Windows\System32\igfxpers.exe
Provides additional options for Nvidia graphics cards

C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
Part of the LogMeIn utility

C:\Program Files\LogMeIn\x86\LMIGuardian.exe
Gathers information on LogMeIn should it crash or suffer performance issues

C:\Program Files\Immunet Protect\1.0.18\iptray.exe
Immunet Protect (cloud based anti-virus)


C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe
Adobe Acrobat speed launcher

C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
Shortcut to Adobe Acrobat configuration options in the system tray

C:\Program Files\ESET\ESET Smart Security\egui.exe
ESET Smart Security

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Config options for the synaptics touchpad

C:\Program Files\iTunes\iTunesHelper.exe
Monitors itunes and looks for connected ipods (not that I would ever buy an ipod!)

C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
To do with Nokia PC suite, don’t know exactly what it does.

C:\Users\Chris\AppData\Local\Microsoft\Live Mesh\Bin\Servicing\0.9.4014.7\MoeMonitor.exe
Windows Live Mesh service

C:\Program Files\Windows Sidebar\sidebar.exe
Windows sidebar gadgets

C:\Program Files\Windows Live\Messenger\msnmsgr.exe
Windows Live Messenger

C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
Nokia Ovi suite (the result of a new phone on Friday)

C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
Nokia PC Suite

C:\Users\Chris\AppData\Local\Microsoft\Live Mesh\GacBase\Moe.exe
Another Live Mesh related application

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
Belongs to Synaptics Pointing Device Driver

C:\IDrive\IDriveETray.exe
IDrive Tray application

C:\IDrive\IDriveEBackground.exe
IDrive backup applicatin

C:\Windows\system32\SearchProtocolHost.exe
I presume this is related to Windows searches/indexing – could someone confirm?

C:\Windows\system32\SearchFilterHost.exe
Same with the above

C:\Program Files\Common Files\Nokia\NoA\nokiaaserver.exe
Another PC Suite related application

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
The application that provided this log.
chryssi2001 MRU Teacher Emeritus
November 17, 2009, 12:12 PM UTC
Hello chrisglew,

Welcome to your first p/l. :)

Room 01 has a lot of topics, which you should read.
But read here where you can find information for this p/l and some future ones.

Please repost this p/l after you did the search from the proper sites.

I want the name of each process and what it does, as explained in 00a p/l example.

If any process doesn't excist in the links from the topic i gave you, google to find more information. Google will be your best friend from now and on. ;)

Is this a vista pc?

Is ESET your Antivirus?
chryssi2001 MRU Teacher Emeritus
November 19, 2009, 5:51 PM UTC
Hello chrisglew,

Is everything ok?

Just to remind you our rules.

See Inactivity part. This p/l will close for Inactivity in 72 hours from my previous post, if no reply from you untill then.
chrisglew
November 19, 2009, 8:54 PM UTC
Yup, it's fine - I'm just re-doing the task (want to make sure I do it correctly this time!). :)
chryssi2001 MRU Teacher Emeritus
November 20, 2009, 9:39 AM UTC
Ok, thanks for answering. :)