mysterious trojan?

Hi all

i have a computer with win2000 recently i noticed some weird behaviour

and installed comodo firewall whenever i try some application that uses
the tcp/ip networking (opera, firefox, filezilla etc) comodo warns me
that "hhdbnkmr.exe" has modified the application (e.g. firefox.exe) in
memory.

hhdbnmkr.exe is reported as being located in c:\documents and
settings\<username>\local settings\application data\hhdbnkmr.exe

but (of course?) there is no such executable in that folder, even if I
look into it loggin on to the computer uder a different user.

I have tried to do some search on th internet for hhdbnkmr.exe but I
have found nothing.

I found that bnkmr would be a class of trojans though.

Any idea on what this hhdbnkmr.exe really is and on how to clean my system?

I have tried different products and techniques but to no avail

thanks

verdegiallo wrote:
> Hi all
>
> i have a computer with win2000 recently i noticed some weird behaviour
>
> and installed comodo firewall whenever i try some application that
> uses the tcp/ip networking (opera, firefox, filezilla etc) comodo
> warns me
> that "hhdbnkmr.exe" has modified the application (e.g. firefox.exe) in
> memory.
>
> hhdbnmkr.exe is reported as being located in c:\documents and
> settings\<username>\local settings\application data\hhdbnkmr.exe
>
> but (of course?) there is no such executable in that folder, even if I
> look into it loggin on to the computer uder a different user.
>
> I have tried to do some search on th internet for hhdbnkmr.exe but I
> have found nothing.
>
> I found that bnkmr would be a class of trojans though.
>
> Any idea on what this hhdbnkmr.exe really is and on how to clean my
> system?
>
> I have tried different products and techniques but to no avail
>
> thanks

Try the free version of SuperAntiSpyware. Dl it, install it, update it and
run it.
It is just as powerful as the 'paid' version in getting rid of spyware, etc
but it is on-demand only instead of full-time like the 'paid' version. It
also has a good uninstall program if you decide to get rid of it. If you do
un-install it, make sure SAS is not running or active, even in the systray
before using the uninstall program just to better the odds of a clean
uninstall.
Buffalo
PS: Please report back with the results, whether it helped or not.