GENDEL32.EXE? Anyone know what this file is?

[Blur]

Hope this is the right forum to ask about this.

This file just showed up in my root directory recently, anyone know what it is? I tried to run it but nothing seems to happen, I?ve also scanned it for viruses and Ad-aware doesn't flag it as anything suspicious either.

Did some research on google and no one seems to know what it is.

Thanks for any help.

 

[KillerCow]

Do you have something listening on port 4444 after running it (type "netstat -a" in a command window)?
If so than it is probably a MUD server.

grendel.exe <--'s root

 

[Blur]

Thanks for the suggestion KillerCow.

I don't think its a MUD server, nothing is listening on that port and the filename is GENDEL32.EXE not GRENDEL.EXE. Also, its only about 52K in size.

 

[KillerCow]

Sorry, I should have checked the file name more closely.

Anyways... you should get rid of it. There isn't a reason for it to be in the root directory. Also, search your registry for references to gendel32. And check your RUN and RUNONCE keys to make sure that nothing suspicious is being started. You should also take a look at the running task list to see if anything funny is listed there. And take a look at where the explorer plugins install themselves... can't remember where right now....

some links...
gendel32.dll
Google groups search <- my Norwegian is poor... so I can't make much sense of these

also... one of the responses on gogle groups reported the file's size as 56,320 bytes... which is the same size as W32.Vote.gen@mm... not that that really means anything...

 

[Blur]

Thanks for the help KillerCow, that research must have taken alot of time. Thanks alot