faxhard.exe

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

faxhard.exe had "consumed" the processor and memory on a PC that I did
troubleshooting for, today. Found it running in Windows Task Manager, would
stop the process and within seconds, it was running again. Finally deleted
it again and went to the registry, finding several faxhard entries there,
too. Deleted the registry lines and the PC runs like a top again. Is this a
new virus or spyware on steroids?
 
Chances are it is non-viral malware.

Please perform the following and make sure nothing else is lying about...

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt263.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM .

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point


* * * Please report your results ! * * *

Dave




| faxhard.exe had "consumed" the processor and memory on a PC that I did
| troubleshooting for, today. Found it running in Windows Task Manager, would
| stop the process and within seconds, it was running again. Finally deleted
| it again and went to the registry, finding several faxhard entries there,
| too. Deleted the registry lines and the PC runs like a top again. Is this a
| new virus or spyware on steroids?
| --
| RLR
 
Please go back and study what you found.
Ask yourself, should an executable be placed in the following location...
%windir%\java\Packages and Executed from the Registry ?

Is this actually part of Java ? Whose java ?
Is this legitimate or is it a parasite hiding itself ?

Dave




"NoNoBadDog!" <mypants_bjsledgeATpixi.com> wrote in message
| A search on Google disclosed that "faxhard.exe" is part of the Java suite.
|
| Bobby
 
If you would do the Google search yourself, you would see that it is a valid
part of the package.

Bobby
 
I already did prior to your post and I didn't come to that conclusion based upon the one and
only hit in Google.

Dave



"NoNoBadDog!" <mypants_bjsledgeATpixi.com> wrote in message
| If you would do the Google search yourself, you would see that it is a valid
| part of the package.
|
| Bobby
|
| | > Please go back and study what you found.
| > Ask yourself, should an executable be placed in the following location...
| > %windir%\java\Packages and Executed from the Registry ?
| >
| > Is this actually part of Java ? Whose java ?
| > Is this legitimate or is it a parasite hiding itself ?
| >
| > Dave
| >
| >
| >
| >
| > "NoNoBadDog!" <mypants_bjsledgeATpixi.com> wrote in message
| > | > | A search on Google disclosed that "faxhard.exe" is part of the Java
| > suite.
| > |
| > | Bobby
| >
| >
|
|
 
As indicated, I'd already deleted the registry entries. However, I kept your
instruction for future use, as it is more reasonable than my gambling
approach.

Thanks
 
Back
Top