Rogue executable in C:\windows\temp

[hipp2112]

RegCure and XoftSpy were 2 programs just recently installed. I found mention of these in another forum before I found this one. I have not yet uninstalled QuickSweeper. I've been dealing with a major BlackBerry problem all day. BlueStar is an addon to our Microsoft Dynamics AX ERP package. It is used to store and view CAD drawings. Everyone in the company has this installed.

[PhilliePhan]

BlueStar is an addon to our Microsoft Dynamics AX ERP package. It is used to store and view CAD drawings. Everyone in the company has this installed.

Thanks - that was one that I was not familiar with. Thought maybe it was the astronomy program. If memory holds, it used video applications similar to what vitalstream provides.

-- It it just the one compy that tries to dial home?


My friend ShadowPuterDude took a tiny little batch I wrote some time ago and vastly improved it. You could try running it and posting the log. Maybe it will help?

ISeeYouXP by ShadowPuterDude
http://downloads.malwareteks.com/ISeeYouXP.exe

-- Double-click ISeeYouXP.exe, ISeeYouXp will be extracted to C:\ISeeYouXP.
-- ISeeYouXP will autorun after installation.

NOTE: Vista Users ISeeYouXP will not autorun on Vista.


I'll try to check back tonight.

Cheers
PP