Author Topic: proquota.exe ??  (Read 9341 times)

0 Members and 1 Guest are viewing this topic.

roadhawk1

  • Guest
proquota.exe ??
« on: May 17, 2009, 07:00:42 PM »
I have the following "potential malware" detected during a recent avast scan today

C:\WINDOWS\system32\wbem\proquota.exe


I put it in the chest. But I'm mixed on what to do after. Not sure to trash or keep. I'm not sure I deleate well, my pc could mess up really bad or not.

John2009

  • Guest
Re: proquota.exe ??
« Reply #1 on: May 17, 2009, 07:05:13 PM »
DONT DELETE it. Try running it through virus total. However that may require "re-infecting" your computer by restoring it, excluding it temporarly, and sending it to virus total. You may do that, but you will need to un-exclude the file and put it back in the chest.


www.virustotal.com

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: proquota.exe ??
« Reply #2 on: May 17, 2009, 07:22:13 PM »
Hi roadhawk1,

First we have to establish whether it is real badware or a so-called false positive.

Description: proquota.exe is located in the folder C:\Windows\System32. Known file sizes on Windows XP are 50,176 bytes (50% of all occurrence), 45,056 bytes, 45,568 bytes.
There is an icon for this program on the taskbar next to the clock. The file is a Windows system file. The program has a visible window. The file is a Microsoft signed file. proquota.exe is able to record inputs, monitor applications, manipulate other programs. Therefore the technical security rating is 0% dangerous, however also read the users reviews.

Important: Some malware camouflage themselves as proquota.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the proquota.exe process on your pc whether it is pest. We recommend Security Task Manager for verifying your computer's security. It is one of the Top Download Picks of 2005 of The Washington Post and PC World. The malware variant is being described here: http://www.prevx.com/filenames/814125165785198052-X1/PROQUOTA.EXE.html

So first check at virustotal.com
If malicious report here and we what further steps to take to secure your OS,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Jtaylor83

  • Guest
Re: proquota.exe ??
« Reply #3 on: May 17, 2009, 07:46:29 PM »
And here. 83% of this file found to be a threat.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: proquota.exe ??
« Reply #4 on: May 17, 2009, 07:48:55 PM »
Hi Jtaylor83,

Agree with you fully if the victim has not installed it himself,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

roadhawk1

  • Guest
Re: proquota.exe ??
« Reply #5 on: May 19, 2009, 02:47:29 AM »
Jtaylor83. I tried virus total , but the file didnt show up on the list of stuff on the wbem subfolder.

John2009

  • Guest
Re: proquota.exe ??
« Reply #6 on: May 20, 2009, 03:21:30 AM »
It wasnt Jtaylor who posted virus total, it was me. And we have already established it a threat