OT: Anyone heard of this file?

[pathfinder]

Originally posted by Baron Munchausen:
Wow... you've got one of those really intricate self-preserving spyware programs. Have you run a simple integrity check of your system files? It might have replaced a basic system file with a different copy including a re-installer for itself. Under Win 9x you run the sysinfo utility and there's an option to run the system file checker under the tools menu. Dunno what the equivalent is for 2k/XP.

I think you really need to get Spybot S&D. It's pretty good at destroying nasties like this.

http://www.safer-networking.org/

Spybot didn't find it.

[Baron Munchausen]

Originally posted by Arkcon:

quote:

---

Originally posted by Baron Munchausen:

I think you really need to get Spybot S&D. It's pretty good at destroying nasties like this.

http://www.safer-networking.org/

Thanks, Baron. I was using ver 1.2, I didn't know there was a new better Version until I clicked.

Pathfinder:
OK. Some guy on the USENET has seen similar filename in systems built on SiS chipsets. You have an asus Mobo, which I didn't post the USENET 'cause I didn't think it was important (Dumb!).

I'll post more info on the USENET later. But until then there is something to try. Run msinfo32. Maybe you've seen this program before, but it's new to me. It lists all hardware components and the files they require.

I know you're sure it's a new program, but maybe it's needed for your hardware, got spoofed (or innocently damaged), and can be repaired by reinstalling hardware drivers from the install CD-ROM.

---

Yeah, that's a possiblity. Maybe this is a legit driver and something on his Mobo has gone flaky and it is popping up a warning box but failing to 'stay put' and transmit the message because of some conflict with something else in the system.

[Gandalf Parker]

There are some programs that both ad-aware and spybot will recommend a specific cleaner for. By any chance, when you go to google, are the first few results on every search trying to get you to search again at a site called 2020? Thats one example. Have you added any search bars or other buttoned goodies to your browser? or your IM program? try searching on those.

[ May 23, 2004, 14:46: Message edited by: Gandalf Parker ]

[pathfinder]

Go figure, file is still there BUT has not popped up in the Last hour or so.

[BBegemott]

Hi

I'm Andrea. Sorry to bother you but surfing the internet I saw that you know something about the file siae3123.exe.

I have this problemis a window that keeps opening every 30 seconds saying that it cannot start the file siae3123.exe. i
try to delete this file but is impossible.

Do you know hao to help me?

Once again i apoligioze to bother you qith my problemns but i really need help.

thank you very much

Andrea

This is the email I got today...
I'm no big expert about that file...
Pathfinder, did you have any success with it?

EDIT- Looks like google tracked me down.

[ May 28, 2004, 18:08: Message edited by: BBegemott ]

[Gozra]

I ended a similar proble just Last night. I ended up doing several things. I opened the file up with note pad and dleted it and then saved it. that almost worked. I finally killed it with norton antivirus. I just kept hammering at it until it quit. I kept trying several things. I wish I could be more specfic. Oh try renaming the file. and Combination of safe mode and cleaning the registery. I tried all thos things and finally registerd my copy of norton and then after that it appeared that norton finally helped destroyed it. I homp I am making some sense it was 2 am before I finall got most of this done. My file was Trojan.virus lsb_3f.dll.
Sorry for the jumbled post
Gozguy

[Arkcon]

Well now, this is funny ... siae3123.exe is no longer unknown to Google. Not only that, but our forum is now a source of expertise. Hello out there, people of Earth. We come in peace.

In all seriousness, this file seems to be spreading slowly around the world. {see here if you can read Dutch}


Pathfinder, did you try the latest Version of Spybot? Version 1.3 add lots of stuff, that Version 1.2 didn't have. Spybot does tend to find more things than Adaware. It's just that in rare occasions some of the registry entries it finds are needed by computer, and aren't spyware.

[EDIT]

Originally posted by Arkcon:
If you hate the USENET, don't worry, I won't let the message get traced back to you.

Uh...oops, sorry guys. Guess I didn't do such a good job in that department did I?

[ May 29, 2004, 00:50: Message edited by: Arkcon ]