Guest Divine_si Posted August 15, 2007 Posted August 15, 2007 I recently found the file YIH0L80A.EXE running in my task list. On a couple of occasions I've found 3 or 4 instances of it running, but I can't find any information as to what the file is or what it is associated with. A search of my hard drive only found the file in the c:\windows\prefetch directory, but I can't find were the actual file is located. Any help/suggestions?
Guest PA Bear Posted August 15, 2007 Posted August 15, 2007 Re: What is YIH0L80A.EXE Run a /thorough/ check for hijackware, including posting your hijackthis log to an appropriate forum. Checking for/Help with Hijackware http://aumha.org/a/parasite.htm http://aumha.org/a/quickfix.htm http://aumha.net/viewtopic.php?t=5878 http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction http://mvps.org/winhelp2002/unwanted.htm http://inetexplorer.mvps.org/data/prevention.htm http://inetexplorer.mvps.org/tshoot.html http://www.mvps.org/sramesh2k/Malware_Defence.htm http://defendingyourmachine2.blogspot.com/ http://www.elephantboycomputers.com/page2.html#Removing_Malware When all else fails, HijackThis v1.99.1 (http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use. It will help you to both identify and remove any hijackware/spyware with assistance from an expert. **Post your log to http://forums.spybot.info/forumdisplay.php?f=22, http://castlecops.com/forum67.html, http://forums.subratam.org/index.php?showforum=7, http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert analysis, not here.** If the procedures look too complex - and there is no shame in admitting this isn't your cup of tea - take the machine to a local, reputable and independent (i.e., not BigBoxStoreUSA) computer repair shop. -- ~Robear Dyer (PA Bear) MS MVP-Windows (IE, OE, Security, Shell/User) AumHa VSOP & Admin; DTS-L.org Divine_si wrote: > I recently found the file YIH0L80A.EXE running in my task list. On a > couple > of occasions I've found 3 or 4 instances of it running, but I can't find > any > information as to what the file is or what it is associated with. A > search > of my hard drive only found the file in the c:\windows\prefetch directory, > but I can't find were the actual file is located. > > Any help/suggestions?
Guest dobey Posted August 15, 2007 Posted August 15, 2007 Re: What is YIH0L80A.EXE "Divine_si" <Divinesi@discussions.microsoft.com> wrote in message news:0D4E236E-9FC4-443E-ACB7-98E8BA59DF57@microsoft.com... >I recently found the file YIH0L80A.EXE running in my task list. On a >couple > of occasions I've found 3 or 4 instances of it running, but I can't find > any > information as to what the file is or what it is associated with. A > search > of my hard drive only found the file in the c:\windows\prefetch directory, > but I can't find were the actual file is located. > > Any help/suggestions? Might be malware, virus, trojan that generates random filenames for its self. Does your PC seem to be working OK? This utility might be able to help you locate the exe and give you more information. http://www.microsoft.com/technet/sysinternals/utilities/processmonitor.mspx This one will give you lots of info. http://www.microsoft.com/technet/sysinternals/Utilities/ProcessExplorer.mspx Of course it could be some totally harmless file, but if it was something installed by another program, chances are someone else would have already asked your question, and it would have been documented. Search this group or the net for links to virus, malware, trojan removal and diagnostics.
Guest Laughingstar~* Posted August 15, 2007 Posted August 15, 2007 Re: What is YIH0L80A.EXE Wow, Pa Bear, that's a post-full! Now I'm more nervous. ;0)) "PA Bear" <PABearMVP@gmail.com> wrote in message news:%23NPqriw3HHA.5740@TK2MSFTNGP03.phx.gbl... > Run a /thorough/ check for hijackware, including posting your hijackthis > log to an appropriate forum. > > Checking for/Help with Hijackware > http://aumha.org/a/parasite.htm > http://aumha.org/a/quickfix.htm > http://aumha.net/viewtopic.php?t=5878 > http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction > http://mvps.org/winhelp2002/unwanted.htm > http://inetexplorer.mvps.org/data/prevention.htm > http://inetexplorer.mvps.org/tshoot.html > http://www.mvps.org/sramesh2k/Malware_Defence.htm > http://defendingyourmachine2.blogspot.com/ > http://www.elephantboycomputers.com/page2.html#Removing_Malware > > When all else fails, HijackThis v1.99.1 > (http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use. > It will help you to both identify and remove any hijackware/spyware with > assistance from an expert. **Post your log to > http://forums.spybot.info/forumdisplay.php?f=22, > http://castlecops.com/forum67.html, > http://forums.subratam.org/index.php?showforum=7, > http://aumha.net/viewforum.php?f=30, or other appropriate forums for > expert analysis, not here.** > > If the procedures look too complex - and there is no shame in admitting > this isn't your cup of tea - take the machine to a local, reputable and > independent (i.e., not BigBoxStoreUSA) computer repair shop. > > -- > ~Robear Dyer (PA Bear) > MS MVP-Windows (IE, OE, Security, Shell/User) > AumHa VSOP & Admin; DTS-L.org > > Divine_si wrote: >> I recently found the file YIH0L80A.EXE running in my task list. On a >> couple >> of occasions I've found 3 or 4 instances of it running, but I can't find >> any >> information as to what the file is or what it is associated with. A >> search >> of my hard drive only found the file in the c:\windows\prefetch >> directory, >> but I can't find were the actual file is located. >> >> Any help/suggestions? >
Guest Pegasus \(MVP\) Posted August 15, 2007 Posted August 15, 2007 Re: What is YIH0L80A.EXE "Divine_si" <Divinesi@discussions.microsoft.com> wrote in message news:0D4E236E-9FC4-443E-ACB7-98E8BA59DF57@microsoft.com... >I recently found the file YIH0L80A.EXE running in my task list. On a >couple > of occasions I've found 3 or 4 instances of it running, but I can't find > any > information as to what the file is or what it is associated with. A > search > of my hard drive only found the file in the c:\windows\prefetch directory, > but I can't find were the actual file is located. > > Any help/suggestions? While it could be a virus, it could also be a virus scanning file. I recall that Trend Internet Security used to generate such randomly named files and place them into the %temp% directory. The purpose behind the idea was to make it harder for viruses to knock out the virus scanner software. What virus scanner do you use?
Recommended Posts