CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

uqzxfng

 
Post new topic   Reply to topic       All -> FavForums -> Startup Programs [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
skinupanother

Cadet
Cadet


Joined: Oct 15, 2004
Posts: 4
Location: UK

PostPosted: Fri Oct 15, 2004 9:17 pm    Post subject: uqzxfng
Reply with quote

I have found this in start up uqzxfng C:\WINDOWS\System32\uqzxfng.exe in my start up list, unticked it in start up but when rebooted it has started up again. I have looked in the list on this site but have not seen it mentioned. Any ideas?

Back to top
View users profile Send private message
pacs-portal

Pacman Host
Pacman Host


Joined: Oct 05, 2004
Posts: 142
Location: UK

PostPosted: Fri Oct 15, 2004 11:23 pm    Post subject:
Reply with quote

First thoughts are it's a malware generated random entry of some kind.


_________________
Paul Collins
(aka Pacman)
Pacs Portal - http://www.pacs-portal.co.uk/
StartupList - http://www.sysinfo.org/startuplist.php
Back to top
View users profile Send private message Visit posters website
TonyKlein

Site Moderator
Microsoft MVP

Joined: Oct 15, 2002
Posts: 13120
Location: Netherlands
MIRT Moderators MVP Premium Security Experts

PostPosted: Sat Oct 16, 2004 7:48 am    Post subject:
Reply with quote

My thoughts exactly, probably Blazefind GoldenPalace Casino related or one of a number of other hijackers..

However, wiithout any details of your configuration it's impossible to say, so if you want us to have a closer look, I suggest you proceed as follows:

Go to CastleCops Link/downloads-cat-14.html, and download Hijack This.

Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, and save the log somewhere.

NOTE: Most of what Hijack This lists will be harmless or even required, so do NOT fix anything yet.

Next, go to the Hijackthis - Spyware, Viruses, Worms, Trojans section of this board.

Press "New Topic", explain your problem, and copy and paste the contents of the Hijack This log into your new message.

Reply to this topic including a link to the new topic you posted, and we'll have a look!

Cheers


_________________
Tony image CLSID List
Back to top
View users profile Send private message
skinupanother

Cadet
Cadet


Joined: Oct 15, 2004
Posts: 4
Location: UK

PostPosted: Sat Oct 16, 2004 11:31 am    Post subject: uqzxfng
Reply with quote

I have run Hijackthis and posted as requested link is CastleCops Link/t81469-uqzxfng_exe.html

Thanks for the help.

Back to top
View users profile Send private message
TonyKlein

Site Moderator
Microsoft MVP

Joined: Oct 15, 2002
Posts: 13120
Location: Netherlands
MIRT Moderators MVP Premium Security Experts

PostPosted: Sat Oct 16, 2004 3:50 pm    Post subject:
Reply with quote

You're welcome! And I see that Yellowhammer is already helping you there. Smile


_________________
Tony image CLSID List
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Startup Programs All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer