Anyone knows what this is?

[Mimikyu]

Hello everyone.
I found an suspicious program running in the background of Window only viewable in the Taskmanager in the Autostart tab.

Does anyone know what this is?
Is it a malware?

 

[linuxares]

Upload it to virustotal.com

 

[Mimikyu]

Upload it to virustotal.com

The thing is I can't, it's in the Taskmanager and I only can "activate" it or "search online"... There is no Properties Menu or so

 

[linuxares]

If you right click it in Taskmanager, can you go "properties" on it? To see where it started from?

You can also download https://learn.microsoft.com/en-us/sysinternals/downloads/process-explorer and go under "Options" and "Virustotal.com" and enable it.

 

[Mimikyu]

Update: The names changing when I put my PC on sleep mode.

 

[linuxares]

Still, try get Process Explorer, you can see what spawns it and also hopefully get it to virustotal.

 

[Mimikyu]

If you right click it in Taskmanager, can you go "properties" on it? To see where it started from?

You can also download https://learn.microsoft.com/en-us/sysinternals/downloads/process-explorer and go under "Options" and "Virustotal.com" and enable it.

I did, the program opened a google page, is that okay?

Post automatically merged: Nov 6, 2024

Still, try get Process Explorer, you can see what spawns it and also hopefully get it to virustotal.

I can't find it... :,(

 

[linuxares]

uuuuhmm... what?
It's a software from SysInternals (owned by Microsoft now days). If anything it should open maybe Bing? What did you do?

 

[Mimikyu]

uuuuhmm... what?
It's a software from SysInternals (owned by Microsoft now days). If anything it should open maybe Bing? What did you do?

Only what you told me......

 

[linuxares]

https://www.malwarebytes.com/adwcleaner
https://www.hitmanpro.com/en-us/downloads (No need to register, just chose no and one time scan.)

 

[linuxares]

Download these two and run them... I got a funny feeling you might gotten a virus...

 

[Mimikyu]

Download these two and run them... I got a funny feeling you might gotten a virus...

I am right now, thank you. I'll tell you if it works

 

[linuxares]

Hopefully they find what that odd v600 thingy is. Never normal when a file changes name...

 

[Mimikyu]

Hopefully they find what that odd v600 thingy is. Never normal when a file changes name...

Sooooo... Both found nothing. Malwarebytes found two drivers (Samsung USB and Hp Printer) and HitmanPro found sites cookies and a Text to Speech model from Windows...

 

[linuxares]

v600 is funny enough an Epson printer.


https://live.sysinternals.com/autoruns.exe - can you open this?

 

[Mimikyu]

v600 is funny enough an Epson printer.


https://live.sysinternals.com/autoruns.exe - can you open this?

I can lemme look

Post automatically merged: Nov 6, 2024

And now

 

[linuxares]

Can you see the v600?

 

[Mimikyu]

It says P2kAutostart, V600.exe not found. Now i know what that is. It's an program that i used to open the storage of my Motorola V980

Post automatically merged: Nov 6, 2024

Thank you so much for helping me figuring out what the heck this thing was.

 

[linuxares]

You can remove it from Autoruns with the help of autoruns from Sysinternals :3

 

[Mimikyu]

You can remove it from Autoruns with the help of autoruns from Sysinternals :3

I did thank you so much!!!!!!! ヾ(•ω•`)o