1 CLICK WinXcelerator.exe

[blank]

I'm sorting through our HJT log DB and I'm finding this process quite a bit but we have it defined as unknown currently... do any of you know what this is? The only references I'm finding it with are logs that have had a trojan so is this something installed by another baddy?

[PhilliePhan]

I am not sure - Have been away from the malware arena while working on other things.
On the surface, it looks legitimate. We should ask users if they installed it when we run across them.

It does kind of throw up a red flag, though. Kinda like the Smitfraud infections that delivered bogus anti-spy app extortions.

I think this can be tracked to Neurosoft Corp.
Their aggressive affiliate program may open the door to abuses similar to what we have seen in the past with the Smitfraud and Vundo families of Trojans . . . .
Neurosoft Affiliate Program

This seems ripe for the same kind of extortionary tactics as we have seen before from the Trojans I noted above, among others.

PP

[TurcoLoco]

It doesn't appear as malware but I think PP is right, it will depend on the end user's feedback to see if they installed it or not.
According to this info, it is a memory management utility which is not very typical of malware disguised as a legit program but hard to say for sure.

~TL