startup progams

[dudevenezuela]

I have this progam or whatever it is in my startup. I tried removing from the startup but it came again at the startup by itself

Any1 know what is it ? and how to fix it ?

http://img136.exs.cx/my.php?loc=img1...=inicio0bm.png

[{I}{K}{E}]

run a virusscanner or adware/spyware.

its malware shit (Short for malicious software, software designed specifically to damage or disrupt a system, such as a virus or a Trojan horse.)

[dudevenezuela]

I did it with ad aware and AVG and it didn't found anything

[peat moss]

I did it with ad aware and AVG and it didn't found anything

Try an online scan? http://housecall.trendmicro.com/hous...start_corp.asp

[dudevenezuela]

Try an online scan? http://housecall.trendmicro.com/hous...start_corp.asp

It didn't find anything neither

[wipe709]

The microsoft (giant) antispyware prog is very good, also Spybot S&D.

Show hidden files in Windows Explorer (Tools - Folder Options - View), and scan the Application Data folder (C:\Documents and Settings\*username*\Application Data) with AVG or Trend online (and the antispyware apps)

See the folder called Flapan... *something* or search for 'warn sect media.exe' - and try removing the folder (don't delete unless your sure it Isn't going to affect your system - maybe Zip archive the folder) and disabling the startup entry with Mike lin's Startup control panel tool
http://www.mlin.net/StartupCPL.shtml

[tesco]

find the program in the task manager under processes>'end process' it.
click start>run>msconfig>startup>disable it from startup.
go to the folder where that file is and delete it.
now restart and it should be gone.

[dudevenezuela]

FIXED
The folder was called FLAP ANTE and it had like 5 .exe including warn sect media.exe

I erased the folder in PROGAM FILES last week but there was another copy on Documents and Settings/..........

The weird thing was that neither AVG,AD Aware, Spybot, and the trend micro online search found anything

I just found this malware because I noticed something was eating my RAM memory


PD. the processes that runned this malware was IEXPLORE.EXE (more than 2) without having IEXPLORER Open and sometimes it change to FUNK BOOK.EXE (this process appeared and dissapeared quickly)

Thanks all for ur help