Background Process

[Brookie]

Does anyone know any info about a process which runs as oatteoee.exe when viewing the processes in task manager.

I have trawled through many search engines and come up with zilch. Seems to slow the PC down and is loaded at startup. Not able to find reference in registry. Am able to end process in task manager.

Any advice.

Thanks.

[CoffeeFiend]

I'd check system.ini and win.ini to make sure. That process has got to start somehow. Perhaps you can make a list of all the registry entries (or a HijackThis log) and such. Sounds like a random generated file name - definately not a normal process. Sounds like scumware to me...

[pthomas]

Have you run any sort of spyware scan on it?

Paul

[Brookie]

Ran spybot search and destroy which did not recognise it.

Ran msconfig and sure enough it is there. Still don't know what it does. It runs from c:\windows\system32\oatteoee.exe.

An entry in HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name - mfnzfhoekb

Type - REG_SZ

Data - C:\WINDOWS\System32\oatteoee.exe

I'll try and disable it and see if I get any result.

Thanks all.

[oftentired]

Find the file on your drive and right click it and examine its properties. Specifically look at the version tab.

The description and copyright info may be interesting. And you can click the left hand pane and see different info in the right hand pane.

[MCT]

just 2 note tho.. the version & other things there can be changed with a attribute program.. so it doesnt mean anything.. someone can change it 2 say microsoft

[pthomas]

Try running a program called "a2". You can grab it here for free:

http://www.emsisoft.com/en/software/download/

It finds the more malicous spyware and can remove stuff that spybot, adaware and spysweeper can't

Paul