Suspicious executables

Status
Not open for further replies.

PcEthuaist

Distinguished
Aug 12, 2011
20
0
18,560
In my older laptop I have a explorer.exe in my windows folder that shows up as explorer.EXE in taskmanager, but in the windows folder it does not have capital letters in the exe part (explorer.exe). Other processes that have the capital exe are SeaPort.EXE, bcmntray.EXE, BCMWLTRY.EXE, WLTRYSVC.EXE.

I am suspecting that these processes have been hijacked or they are fake versions, being really malware or the malware has hidden itself inside the process.

Why do some of the processes have a capital EXE extension?
 
Solution
There are certain processes that show up as .EXE, instead of .exe. To be sure that your system is clean, run through the malware guide in my signature.

PcEthuaist

Distinguished
Aug 12, 2011
20
0
18,560
I've ran full scans using Microsoft security Essentials, Malwarebytes Anti-Malware, and scanned with Spybot Search & Destroy, none have foudn anything.

The suspicious thign is that my other pc's do not have explorer.exe with capital EXE in the task manager. If it isn't malware, and if it isn't normal for windows xp to have it this way, then what is the underlying cause?
 

nikorr

Distinguished
Moderator
Trojan Remover is great tool, just like Malwarebytes.

U can upload your file to get analysed in : Virustotal - is a service that analyzes suspicious files and URLs and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines.

http://www.virustotal.com/

aford10 said it all already, I think its clean too.

30 free only, but great bug removing tool.
http://www.simplysup.com/
 
Status
Not open for further replies.