mysterious trojan?

[verdegiallo]

Hi all

i have a computer with win2000 recently i noticed some weird behaviour

and installed comodo firewall whenever i try some application that uses
the tcp/ip networking (opera, firefox, filezilla etc) comodo warns me
that "hhdbnkmr.exe" has modified the application (e.g. firefox.exe) in
memory.

hhdbnmkr.exe is reported as being located in c:\documents and
settings\<username>\local settings\application data\hhdbnkmr.exe

but (of course?) there is no such executable in that folder, even if I
look into it loggin on to the computer uder a different user.

I have tried to do some search on th internet for hhdbnkmr.exe but I
have found nothing.

I found that bnkmr would be a class of trojans though.

Any idea on what this hhdbnkmr.exe really is and on how to clean my system?

I have tried different products and techniques but to no avail

thanks

 

[David H. Lipman]

From: "verdegiallo" <[email protected]>

| Hi all

| i have a computer with win2000 recently i noticed some weird behaviour

| and installed comodo firewall whenever i try some application that uses
| the tcp/ip networking (opera, firefox, filezilla etc) comodo warns me
| that "hhdbnkmr.exe" has modified the application (e.g. firefox.exe) in
| memory.

| hhdbnmkr.exe is reported as being located in c:\documents and
| settings\<username>\local settings\application data\hhdbnkmr.exe

| but (of course?) there is no such executable in that folder, even if I
| look into it loggin on to the computer uder a different user.

| I have tried to do some search on th internet for hhdbnkmr.exe but I
| have found nothing.

| I found that bnkmr would be a class of trojans though.

| Any idea on what this hhdbnkmr.exe really is and on how to clean my system?

| I have tried different products and techniques but to no avail

| thanks

Chances are it does exist but it is marked with the System and Hidden file attaributes and
thus not visible without removing those attributes or setting Explorer to view Hidden and
System files.