exec.exe ?

[Happy-Dude]

I was looking at processlibrary.com and found that one of my running processes was exec.exe . From what the site is telling me, it is a trojan ? I'm going to run a check-up on my system after this, but any advice for what I should do about it ? I ended the process immediatly. And any info on what it does ?

[polonus]

Hi Happy-Dude,

If exec.exe is found in a particular position, and the registry is changed as shown in the information below, you are right, and should follow the removal instructions as given:

http://www.sophos.com/security/analyses/w32spybotz.html

polonus

[Happy-Dude]

Is it possible that because I ended the process that I can't find it ? I'm using the built in search tool in the registry, but it doesn't seem to be able to find it ...

[mauserme]

Terminating the process won't change the registry so if you can't find it this might be benign.  A file named exec.exe is also part of NetZero.

Have you scanned with Ewido?

You could also upload the file to Jotti:

http://virusscan.jotti.org/

[Happy-Dude]

Yeah, I ran a full system checkup on my computer last night and I was clear (phew !) of anything malicious. That's a good thing for me. And before that, I installed WinPatrol onto my system and it identified the process as something related to Netzero Internet software. I use Netzero ocassionally as my dial-up service (as I mentioned on one of my posts).

Code: [Select]

Terminating the process won't change the registry so if you can't find it this might be benign.  A file named exec.exe is also part of NetZero.
So I guess your right mauserme !! Thank god I don't have anything malicious on my system !! Now ... To try and notify Process Library on updating the info ...