»
 

Go Back   ResellerRatings Store Ratings > ResellerRatings Forums > Tech Support

Reply
 
LinkBack Thread Tools Display Modes
Old 12-02-2003, 11:12 PM   #1 (permalink)
Banned
 
Join Date: Nov 2003
Location: Spokane,Wa
Posts: 30
XuLander is on a distinguished road
Send a message via AIM to XuLander
mvhkbcfi.exe ?

what running process in winnt is this?

I shut it down, then I noticed 3 more instances of it, cpu was runnin at 80% constant till I ended this process and tossed it in the trash ,
either its new, or I have really stuck my foot in my mouth this time, didnt find it on any of the search engines either

XuLander is offline   Reply With Quote
Old 12-03-2003, 11:48 AM   #2 (permalink)
Registered User
 
rpertusio's Avatar
 
Join Date: Nov 2002
Location: Hershey, PA
Posts: 1,013
rpertusio is on a distinguished road
Send a message via AIM to rpertusio
I've never seen that process.

How about a search on your hard drives for it?
How about a registry search?

Maybe you need to run Ad-Aware (thinking it might be some new spyware/adware, etc)

- rp
rpertusio is offline   Reply With Quote
Old 12-03-2003, 12:40 PM   #3 (permalink)
Registered User
 
Join Date: Feb 2002
Location: midvale, utah
Posts: 1,296
Jeordiewhite is on a distinguished road
Send a message via ICQ to Jeordiewhite Send a message via AIM to Jeordiewhite Send a message via Yahoo to Jeordiewhite
That doesn't look like a windows nt process, you better check it out. Try a virus scan/trojan/ad-aware(like mentioned by rpertusio)/spybot as well.
Jeordiewhite is offline   Reply With Quote
Old 12-03-2003, 05:48 PM   #4 (permalink)
Banned
 
Join Date: Nov 2003
Location: Spokane,Wa
Posts: 30
XuLander is on a distinguished road
Send a message via AIM to XuLander
Quote:
Originally posted by rpertusio
I've never seen that process.

How about a search on your hard drives for it?
How about a registry search?

Maybe you need to run Ad-Aware (thinking it might be some new spyware/adware, etc)

- rp

First I ran spybot search and destroy , and it went undetected, I then shut down the process via task manager (3 instances were running), and searched the win registry and found 2 entries.

I checked the search engines and couldnt find it, the only new app I have dl'd from the net recently was Adobe reader 6.0.

Im really stumped as to where "mvhkbcfi.exe" came from and what it does, appreciate your response, and if anyone hears anything, or knows anything about this about this please reply.
XuLander is offline   Reply With Quote
Old 12-03-2003, 06:02 PM   #5 (permalink)
Registered User
 
AzKidd69's Avatar
 
Join Date: Oct 2001
Location: Mesa, AZ
Posts: 1,325
AzKidd69 is on a distinguished road
personally I would think it's one of those stinkin viruses that uses a random name each time it infects a new machine...... what was your network traffic doing while that program was running??


norton AV online...

http://security.symantec.com/sscv6/h...WHFHMFNZMBBXLK
AzKidd69 is offline   Reply With Quote
Old 12-03-2003, 11:45 PM   #6 (permalink)
Banned
 
Join Date: Nov 2003
Location: Spokane,Wa
Posts: 30
XuLander is on a distinguished road
Send a message via AIM to XuLander
Quote:
Originally posted by AzKidd69
[B]personally I would think it's one of those stinkin viruses that uses a random name each time it infects a new machine......
You were right on target, and thanks for the link, obviously my (freeby) antivirus was not detecting it.

Norton found 5 entries in the registry from adware progs and 1 Trojan.Sinkin


More info

When I checked the registery I found a whole new filename\lqmisyub.exe followed by C:\WINNT\mvhkbcfi.exe,
and Norton showed the infected file as bbb.exe which after a search , turns up as a free screen saver, lmao (wives cant live with em cant live without em


Quote:
AzKidd69 what was your network traffic doing while that program was running??
My first indicator was Zone alarm ::Praise:: asking me if I wanted to allow mvhkbcfi.exe to act as a server,lol, I put the modem on standby and ended the tasks, and tossed the executable in the trash bin,
right after I started this thread I ran spybot search and destroy again and found a sht load of new spyware, and check the link "More Info",
that pretty much explains what must have been going on with the network.

Thanks again all of you, I am going to take the rest of the evening and edit my registery and try to decide on a anti virus app to purchase,
I would appreciate any tips on the least obtrusive, and most effective anti virus app available.
XuLander is offline   Reply With Quote
Old 12-03-2003, 11:49 PM   #7 (permalink)
Registered User
 
Join Date: Oct 2001
Posts: 6,533
John Prophet is on a distinguished road
"mvhkbcfi" I asked a greek dude about it and he punched me....maybe I mispronounced it?
__________________
"Even a fool is thought to be wise if he is silent"
John Prophet is offline   Reply With Quote
Old 12-04-2003, 12:05 AM   #8 (permalink)
Registered User
 
AzKidd69's Avatar
 
Join Date: Oct 2001
Location: Mesa, AZ
Posts: 1,325
AzKidd69 is on a distinguished road
well you know norton works.. LOL personally that is what I prefer to use and reccomend to others

(always love to see when I can hit a problem right on the head)
AzKidd69 is offline   Reply With Quote
Old 12-04-2003, 12:31 AM   #9 (permalink)
Banned
 
Join Date: Nov 2003
Location: Spokane,Wa
Posts: 30
XuLander is on a distinguished road
Send a message via AIM to XuLander
LMAO@ John Prophet


Quote:
Originally posted by AzKidd69
well you know norton works.. LOL personally that is what I prefer to use and reccomend to others

(always love to see when I can hit a problem right on the head)
Well Norton takes care of our bus computers and does a fine job, but when it comes to the home pc, to me its all about learning, kinda be nice to find a more hands on type of app!

when I discover problem with the home pc,
I am the kind of fool that wants to pick it apart and see how and why it works, possibly contemplate the improvements I would make if I was the creator,lol,,, ah yah I will get Norton
XuLander is offline   Reply With Quote
Reply




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Most Active Discussions

Recent Discussions

All times are GMT -6. The time now is 10:11 AM.