Anyone know what this is?

[Samantha Leigh Tully]

I turned on my computer and got a screen from Norton telling me I had this
on my computer

"mdmdev.exe"

What is it and how do I get it off my computer?

--
Samantha Leigh Tully
http://ca.geocities.com/nx-01@rogers.com
http://ponfarr.blogspot.com
http://ctgalore.vstore.ca

[CalamityKen]

Samantha Leigh Tully wrote:
> I turned on my computer and got a screen from Norton telling me I had
> this on my computer
>
> "mdmdev.exe"
>
> What is it and how do I get it off my computer?

http://www.what-process.com/process-...x?p=mdmdev.exe
--
YoKenny
Keep your Security software up to date at CoU
http://www.dozleng.com/updates/index.php?&act=calendar

[David H. Lipman]

From: "Samantha Leigh Tully" <****off@****off.com>

| I turned on my computer and got a screen from Norton telling me I had this
| on my computer
|
| "mdmdev.exe"
|
| What is it and how do I get it off my computer?
|
| --
| Samantha Leigh Tully
| http://ca.geocities.com/nx-01@rogers.com
| http://ponfarr.blogspot.com
| http://ctgalore.vstore.ca
|

Dump the contents of the IE Temporary Internet Folder cache (TIF)

Start --> Settings --> Control Panel --> Internet Options --> Delete Files


Dump the contents of the Mozilla FireFox Cache

Tools --> Options --> Privacy --> Cache --> Clear


1) Download TrendMicro Sysclean by other of the following 2 methods

Trend Sysclean Method 1
---------------------------------------
Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\sysclean")

Download SYSCLEAN.COM and place it in that directory.
Download the signature files (pattern files) by obtaining the ZIP file.
For example; lpt574.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

Trend Sysclean Method 2
---------------------------------------
Download the utility SYSCLEAN_FE at the following URL --
http://www.ik-cs.com/got-a-virus.htm
SYSCLEAN_FE automates the download and execution process of the Trend Sysclean Package.
Direct URL --
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe

2) Download Ad-aware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Update Ad-aware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDoc...SysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible.
5) Using both the Trend Sysclean utility and Ad-aware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Samantha Leigh Tully]

> * * * Please report back your results * * *

what if I just delete it? How much of a problem would that be?

[Stephen Howe]

> what if I just delete it? How much of a problem would that be?

Sure, go ahead

Stephen Howe

[David H. Lipman]

"Samantha Leigh Tully" <****off@****off.com> wrote in message
news:X8KdnQeUu4jUyf3fRVn-3A@rogers.com
|| * * * Please report back your results * * *
|
| what if I just delete it? How much of a problem would that be?

It may not be enough. If it is a Trojan, what modifications have been made to the OS ?

Does it pair with other Trojans ?

Few infected platforms have just one Trojan. They often have multiple.

Use of the software I suggested will remove the Trojan, correct modifications that a Trojan
has made and the worst case scenario is that nothing else is found. The best thing that
could happen is not only is this trojan found and identified but it finds and clears others
are corrects modifications to the OS>

Deleting just the executable is *rarely* enough.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Samantha Leigh Tully]

> It may not be enough. If it is a Trojan, what modifications have been
> made to the OS ?
>
> Does it pair with other Trojans ?
>
> Few infected platforms have just one Trojan. They often have multiple.
>
> Use of the software I suggested will remove the Trojan, correct
> modifications that a Trojan
> has made and the worst case scenario is that nothing else is found. The
> best thing that
> could happen is not only is this trojan found and identified but it finds
> and clears others
> are corrects modifications to the OS>
>
> Deleting just the executable is *rarely* enough.

I deleted it in safe mode and now there are errors all over my computer.

[David H. Lipman]

From: "Samantha Leigh Tully" <****off@****off.com>

>> It may not be enough. If it is a Trojan, what modifications have been
>> made to the OS ?
>>
>> Does it pair with other Trojans ?
>>
>> Few infected platforms have just one Trojan. They often have multiple.
>>
>> Use of the software I suggested will remove the Trojan, correct
>> modifications that a Trojan
>> has made and the worst case scenario is that nothing else is found. The
>> best thing that
>> could happen is not only is this trojan found and identified but it finds
>> and clears others
>> are corrects modifications to the OS>
>>
>> Deleting just the executable is *rarely* enough.
|
| I deleted it in safe mode and now there are errors all over my computer.
|

See ?

That's why you just DON'T delete files.

Sometimes infectors use names of legitimate files. If you just delete a file you don't know
the consequences.

If you suspect a file, submit the suspect file to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against 17 different AV vendor's scanners.

Another way to submit is to send the suspect file to the following email address
scan<at>virustotal.com
{ replace <at> with @ } with only the word SCAN as the subject.

Then you will know if it is a concern or a False Positive.

If it is still it the Trash Bin (Recycle Bin) Restore the file and submit the file and then
scan the system using directions I provided.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[CWatters]

"Samantha Leigh Tully" <****off@****off.com> wrote in message
news:T5ednahxt886-f3fRVn-og@rogers.com...
> I deleted it in safe mode and now there are errors all over my computer.

What are the error messages? They might be from the trojan (or whatever)
complaining that it's got a problem!