mysterious trojan?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Hi all

i have a computer with win2000 recently i noticed some weird behaviour

and installed comodo firewall whenever i try some application that uses
the tcp/ip networking (opera, firefox, filezilla etc) comodo warns me
that "hhdbnkmr.exe" has modified the application (e.g. firefox.exe) in
memory.

hhdbnmkr.exe is reported as being located in c:\documents and
settings\<username>\local settings\application data\hhdbnkmr.exe

but (of course?) there is no such executable in that folder, even if I
look into it loggin on to the computer uder a different user.

I have tried to do some search on th internet for hhdbnkmr.exe but I
have found nothing.

I found that bnkmr would be a class of trojans though.

Any idea on what this hhdbnkmr.exe really is and on how to clean my system?

I have tried different products and techniques but to no avail

thanks

Re: mysterious trojan?

verdegiallo wrote:
Quoted text here. Click to load it

Try the free version of SuperAntiSpyware.  Dl it, install it, update it and
run it.
It is just as powerful as the 'paid' version in getting rid of spyware, etc
but it is on-demand only instead of full-time like the 'paid' version. It
also has a good uninstall program if you decide to get rid of it. If you do
un-install it, make sure SAS is not running or active, even in the systray
before using the uninstall program just to better the odds of a clean
uninstall.
Buffalo
PS: Please report back with the results, whether it helped or not.



Re: mysterious trojan?


| Hi all

| i have a computer with win2000 recently i noticed some weird behaviour

| and installed comodo firewall whenever i try some application that uses
| the tcp/ip networking (opera, firefox, filezilla etc) comodo warns me
| that "hhdbnkmr.exe" has modified the application (e.g. firefox.exe) in
| memory.

| hhdbnmkr.exe is reported as being located in c:\documents and
| settings\<username>\local settings\application data\hhdbnkmr.exe

| but (of course?) there is no such executable in that folder, even if I
| look into it loggin on to the computer uder a different user.

| I have tried to do some search on th internet for hhdbnkmr.exe but I
| have found nothing.

| I found that bnkmr would be a class of trojans though.

| Any idea on what this hhdbnkmr.exe really is and on how to clean my system?

| I have tried different products and techniques but to no avail

| thanks

Chances are it does exist but it is marked with the System and Hidden file
attaributes and
thus not visible without removing those attributes or setting Explorer to view
Hidden and
System files.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Site Timeline