Welcome to SecurityForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

xsrocewA.exe

 
   Security Forums (Home) -> General Discussions RSS
Next:  Trojan Horse SHeur?  
Author Message
rickyarias

External


Since: Aug 05, 2007
Posts: 1



(Msg. 1) Posted: Sun Aug 05, 2007 3:16 pm
Post subject: xsrocewA.exe
Archived from groups: alt>comp>anti-virus (more info?)

I found this process running in my machine, any idea of what it is?

 >> Stay informed about: xsrocewA.exe 
Back to top
Login to vote
kurt wismer

External


Since: Jul 04, 2003
Posts: 1566



(Msg. 2) Posted: Mon Aug 06, 2007 12:30 am
Post subject: Re: xsrocewA.exe [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

rickyarias.TakeThisOut@gmail.com wrote:
> I found this process running in my machine, any idea of what it is?

hmmm... there once was a poster here who'd respond to those types of
questions with something like "i have a painting that's mostly yellow,
do you think it might be a van gogh?"... when you're talking about
malware or potential malware a filename provides absolutely no useful
diagnostic information...

if you think you have malware, scan your drive... if you think you have
malware your scanner can't detect, try a different scanner and/or send a
sample of the suspect file to your anti-malware vendor for analysis...

--
"it's not the right time to be sober
now the idiots have taken over
spreading like a social cancer,
is there an answer?"

 >> Stay informed about: xsrocewA.exe 
Back to top
Login to vote
Buffalo

External


Since: Jul 19, 2007
Posts: 63



(Msg. 3) Posted: Mon Aug 06, 2007 3:40 pm
Post subject: Re: xsrocewA.exe [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

rickyarias.RemoveThis@gmail.com wrote:
> I found this process running in my machine, any idea of what it is?

Send a copy of it to http://www.virustotal.com
They have many anti-virus programs check it and you should know the results
in minutes.
If it is a virus, please post back.
Heck, please post back anyways.
 >> Stay informed about: xsrocewA.exe 
Back to top
Login to vote
jbclem

External


Since: Apr 28, 2007
Posts: 3



(Msg. 4) Posted: Sun Aug 19, 2007 4:17 pm
Post subject: Re: xsrocewA.exe [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

While you're wasting your time sending it off or asking the question to
people who don't know the answer...why not just rename it to xsrocewA.bxe.
That way it won't execute and you can see if any of your programs stop
working. Googling it (another 30 seconds wasted) shows nothing but
references to your message thread. Also, run Msconfig and see if it's
listed under the startup tab. If it is then for sure rename and/or move it
if it's parked in your System32 folder.

If it's running, download Process Explorer and when you run that you can
often see the name of the originating company or program for this file.
Right clicking(in Process Explorer) on it and chosing Properties will give
you a bunch of tabs with information that should also help figure out it's
origin.

The way I look at it, the closer the spelling (of a running process) is to a
nonsense word, the quicker I'll rename or delete it. Does xsrocewA match up
with any of your programs?


jc


<rickyarias DeleteThis @gmail.com> wrote in message
news:1186338470.785162.55930@b79g2000hse.googlegroups.com...
> I found this process running in my machine, any idea of what it is?
>
 >> Stay informed about: xsrocewA.exe 
Back to top
Login to vote
Buffalo

External


Since: Jul 19, 2007
Posts: 63



(Msg. 5) Posted: Tue Aug 21, 2007 8:17 pm
Post subject: Re: xsrocewA.exe [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"jbclem" <jbclem1.RemoveThis@charter.net> wrote in message
news:gc4yi.359$WZ.289@newsfe05.lga...
> While you're wasting your time sending it off or asking the question to
> people who don't know the answer...why not just rename it to xsrocewA.bxe.

Wow, it would probably take all of 5 min or less to send it out and check
it.
Since 'it' was already running, renaming it now may not help, but certaintly
it shouldn't hurt.
Any more sound advice?
 >> Stay informed about: xsrocewA.exe 
Back to top
Login to vote
Display posts from previous:   
   Security Forums (Home) -> General Discussions All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]