npwngqs.exe file listed in system32 XP Pro SP2

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Got any idea what this file is dated 08-04-2004

I noted this in Msconfig; searched for it on the net and found zilch; found
it in HKLM\Software\Microsoft\Windows\CurrentVersion\Run
 
toasale said:
Got any idea what this file is dated 08-04-2004

I noted this in Msconfig; searched for it on the net and found zilch; found
it in HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Click to expand...

A quick Google for "npwngqs.exe" brings nothing except a post in one of
those Usenet-sucking "web forums" which is probably yours. It is common
for malware to have randomly-named files and this is probably your case.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may
be so infested that Windows will need to be clean-installed. Have all
your data backed up before you take the machine into a shop.


Malke
 
I should have mentioned I'm between an advanced and expert user. I've scanned
with KAV's latest version, CounterSpy and loaded AVG's AV and scanned with
it, but zero reports. I've: posted at Wilders, Smokeys and other "name"
forums, but with no search results; stopped it from loading then renamed it
to .old without any unit degradation. I'll send it Hijack This and see if
anyone has a response.

Thanks for being helpful and responsive.
 
toasale said:
I should have mentioned I'm between an advanced and expert user. I've scanned
with KAV's latest version, CounterSpy and loaded AVG's AV and scanned with
it, but zero reports. I've: posted at Wilders, Smokeys and other "name"
forums, but with no search results; stopped it from loading then renamed it
to .old without any unit degradation. I'll send it Hijack This and see if
anyone has a response.

Thanks for being helpful and responsive.
Click to expand...

In addition to running HJT (a good idea), you might want to submit the
file to Virus Total to see if it they can identify it.

http://www.virustotal.com/


Malke
 
I still can not find anything about this topic and HJT questions go
unanswered. Could this be related to a registration issue after a full format
with the CD that came preloaded from the mfg.?
 
Back
Top