The Naked Scientists

The Naked Scientists Forum

Author Topic: Do these programs belong on my computer, and if so, what do they do?  (Read 5201 times)

Atomic-S

  • Hero Member
  • *****
  • Posts: 619
    • View Profile
Recently I have been having problems with my computer, when starting up for a session and logging onto my ISP, in that error boxes pop up and say that two programs have malfunctioned and will now close. I proceed, and the system continues to function, albeit not excellently. The programs in question are:

o2i9a5g7a33.exe  and  x9r5w5s2y2x6.exe

These were found to reside in the root directory of the hard drive C:.

Also, in the same place were found the following programs, the purpose of which is likewise a mystery to me:

o2i9a5g7a3j3.exe,  m2u8g3w9e4i1.exe,  k8m1l3e9f4n7.exe

These are in the root directory, not WINNT . (Running Windows 2000, having been upgraded from Windows ME, on a micronpc.com Millennia computer.)  I am just a little bit suspicios about these .exe files, having such inscrutable names and being not located with most Windows files, suggesting that they may be there for some reason that someone wants to keep secret. However, I am afraid to delete them in case they may be vital to the system.



DoctorBeaver

  • Too Much Free Time Level Member
  • **********
  • Posts: 12659
  • A stitch in time would have confused Einstein.
    • View Profile
It's difficult to say unless you're a Windows expert. Some Windows programs do have names like that, but so do some dodgy ones.

Try posting your question AT THIS FORUM

Sorry, but that's the best I can offer.

LeeE

  • Hero Member
  • *****
  • Posts: 3382
    • View Profile
    • Spatial
I presume you've scanned them for for malware? If you've got a hex editor you could try having a look inside them for any recognisable character strings - that might give you a clue.

latebind

  • Full Member
  • ***
  • Posts: 248
  • Hello World
    • View Profile
Quote
Recently I have been having problems with my computer, when starting up for a session and logging onto my ISP, in that error boxes pop up and say that two programs have malfunctioned and will now close. I proceed, and the system continues to function, albeit not excellently. The programs in question are:

o2i9a5g7a33.exe  and  x9r5w5s2y2x6.exe

These were found to reside in the root directory of the hard drive C:.

Also, in the same place were found the following programs, the purpose of which is likewise a mystery to me:

o2i9a5g7a3j3.exe,  m2u8g3w9e4i1.exe,  k8m1l3e9f4n7.exe

These are in the root directory, not WINNT . (Running Windows 2000, having been upgraded from Windows ME, on a micronpc.com Millennia computer.)  I am just a little bit suspicios about these .exe files, having such inscrutable names and being not located with most Windows files, suggesting that they may be there for some reason that someone wants to keep secret. However, I am afraid to delete them in case they may be vital to the system.


o2i9a5g7a3j3.exe Please see http://www.prevx.com/filenames/581063393182679143-X1/X9Y9D3E5L9Y82EEXE.html [alias]
m2u8g3w9e4i1.exe Please see http://www.prevx.com/filenames/14600784913341218-X1/X9R5W5S2Y2X62EEXE.html [alias]
k8m1l3e9f4n7.exe Please see http://www.prevx.com/filenames/X825223727437219032-0/K8M1L3E9F4N72EEXE.html
x9r5w5s2y2x6.exe Please see http://www.prevx.com/filenames/14600784913341218-X1/X9R5W5S2Y2X62EEXE.html [alias]
o2i9a5g7a33.exe Please see http://www.prevx.com/filenames/14600784913341218-X1/X9R5W5S2Y2X62EEXE.html [alias]



« Last Edit: 01/04/2009 19:36:45 by latebind »

LeeE

  • Hero Member
  • *****
  • Posts: 3382
    • View Profile
    • Spatial
Ensure that these files are identified by your normal virus scanning software - there are lots of spoof anti-virus scam sites out there where they claim to find problems that don't really exist.  They then either get you to download their special anti-virus tool, which is more likely to be malware, or charge you for software that actually does nothing.  Do not rely upon virus identification and solutions by sources you don't know and trust.

DoctorBeaver

  • Too Much Free Time Level Member
  • **********
  • Posts: 12659
  • A stitch in time would have confused Einstein.
    • View Profile
I agree with LeeE and, in fact, I was going to post something similar before I saw his reply.

Have you got Spybot S&D? That's very good for sorting out malware. You can download it from HERE.

I use it in conjunction with Avast & since I've been using them I've not had a single problem. Download Avast from HERE and click on the "FREE Software" button at the top.

syhprum

  • Hero Member
  • *****
  • Posts: 3319
    • View Profile
I am a little confused is Prevx legitimate or rogue, I am inclined to believe its rogue!

latebind

  • Full Member
  • ***
  • Posts: 248
  • Hello World
    • View Profile
I dont think you should use or download PREVX(I did not meant to imply that in my previous post), I think I just wanted to point out that the answer to whether you should have those files is a definite "NO!"

I would suggest looking for freeware virus removers like AVG.

neilep

  • Withdrawnmist
  • Too Much Free Time Level Member
  • **********
  • Posts: 20589
    • View Profile
Ensure that these files are identified by your normal virus scanning software - there are lots of spoof anti-virus scam sites out there where they claim to find problems that don't really exist.  They then either get you to download their special anti-virus tool, which is more likely to be malware, or charge you for software that actually does nothing.  Do not rely upon virus identification and solutions by sources you don't know and trust.

This happened to me a few years ago !....I paid a fee for the benefit of having some files removed/cleansed only to find that the software I had purchased was malware. Have to say though, a quick phone call and they refunded me immdediately !..which was nice !

nicephotog

  • Sr. Member
  • ****
  • Posts: 332
  • H h H h H h H h H h
    • View Profile
    • Freeware Downloads
"o2i9a5g7a33.exe" is without a shadow of a doubt malware from the name.
Press CNTRL+ALT+DEL and bring up the task manager if your in an NT windows derivative.
If the name is present on the "process" list, select it and switch it off.
Press "find" by filename and locate it/them and delete all copies.
Or , go to the start - accessories - administrative tools: and find the "services" right click on the DLL list with the name and choose "stop" the service, then search for the filename(s) and then delete them all.

To truly commit manual anti-virus activities you kneed to build yourself operational windows folders parity list checking system for your computer.

The main parity folders(with subfolders) are:
c:\windows\system
c:\windows\system32
c:\program files ( 8.3 format name  c:\progra~1 )
c:\windows
( really all subdirectories of .\windows or .\progra~1 )
« Last Edit: 07/04/2009 07:43:27 by nicephotog »

Atomic-S

  • Hero Member
  • *****
  • Posts: 619
    • View Profile
Thanks for the info; I have sought some of the anti-spyware software mentioned, but due to problems with the connection, have not yet been able to install it. I will continue pursuant to instructions from its source when I get the chance. Meanwhile, I deleted the suspect programs, after first backing them up on another volume, and the computer does not seem to work any the worse; in fact it may even work better. The jury, however, is still out.

 

SMF 2.0 | SMF © 2011, Simple Machines