Virus/Spyware/Malware going on, google and AT searches no help

Joemonkey

Diamond Member
Mar 3, 2001
8,859
4
0
When PCs here start up (win2k and XP) there is a random 5 or 6 digit alphanumeric .exe file running in taks manager. If you search for the file, it shows up in the winnt/temp or windows/temp directory and has a running dog icon. If you end the task, the file deletes from the temp directory until next boot when it somehow creates a new random .exe file with the dog icon.

On the XP machines, sometimes at boot you will get a message where "XXXXX.EXE has performed an illegal operation" and ask if I want to notifiy microsoft about it. Then there will be another XXXXXX.EXE file running in task manager. Some people have multiple XXXXX.EXE files in their temp directory as well.

hijack this, adaware, spybot, trend officescan, panda online scan don't find anything.

This is also running on some of our servers too. Google was of no help at all, and I can't find anything here on AT where anyone has seen this issue before. Any ideas?
 

Joemonkey

Diamond Member
Mar 3, 2001
8,859
4
0
well just fyi, it's actually trend micro officescan creating the file each boot... i don't have a clue why they make it a random name, but it's the file that updates the definitions from the AV server... weird