Might have a virus

[Crewman47]

Earlier today I found a program in my Task Manager called mom.exe which is located in my Graphics card software folder ATU's Catalyst Control Center, and the Windows prefetch files folder. I found that my internet cache files had been deleted and there is a 2 or 3 minute delay when loading up all the startup programs, including this mom.exe. I also can't access the main Antivirus sites, Norton, McAfee, Symantec (the ones I know of), get the cannot display site page. I've run my own AV in safe mode and in standard mode and it hasn't detected the file as a threat.

Looking up mom.exe I found that malware and trojans can disguise themselves in this file and make themselves a part of specific programs ,namely ATI files. Should I be worried and try and get rid of this as quickly as possible.

 

[Alpha_Geek]

mom.exe is part of the catalyst control panel.

I'd go safe mode and reinstall the ATI drivers including catalyst control panel. Reboot and do a a/v scan.

If you can't access the major AV sites, try avast.com Avast! is one of the top ten a/v tools, but small enough that virus writers don't attack it.

 

[dillon3001]

mom.exe is part of the catalyst control panel.

I'd go safe mode and reinstall the ATI drivers including catalyst control panel. Reboot and do a a/v scan.

If you can't access the major AV sites, try avast.com Avast! is one of the top ten a/v tools, but small enough that virus writers don't attack it.

Sound advice with the reinstall of ATI's catalyst drivers. I've had to do that once before myself for a similar situation on my own machine. I've had a fair amount of experience with malware removal at my old job so let me know how things go, I'd be happy to help if i can

 

[Jadzia]

If you go here:
http://www.liutilities.com/products/wintaskspro/processlibrary/

use the search box on the mid right hand side for any suspect tasks you find in task manager. It will tell you what it is and about trojan and spyware threats etc.

However, task manager isn't guaranteed to list all threads. Some nasties can hide themselves as part of system or wherever.

 

[Deks]

If you suspect a trojan or spyware, download and install latest Spybot.
It's free, and does a great job in finding numerous spyware and cleaning up your system effectively.
Note, if you cannot delete a virus/spyware/trojan or whatever even if your program finds it, then reboot into Safe mode and re-scan the system from there.
You will be able to remove the threat like that because most of the system files are not in use and can be modified (cleaned up by anti-virus/spyware programs).

 

[Crewman47]

Thanks for al the suggestions, managed to get rid of the problem. Computers running fine now.

 

[Kaziarl]

If you suspect a trojan or spyware, download and install latest Spybot.
It's free, and does a great job in finding numerous spyware and cleaning up your system effectively.
Note, if you cannot delete a virus/spyware/trojan or whatever even if your program finds it, then reboot into Safe mode and re-scan the system from there.
You will be able to remove the threat like that because most of the system files are not in use and can be modified (cleaned up by anti-virus/spyware programs).

First of all, props to Avast. Used it for years, it's the best imho.

Now speaking of spybot. I think I may have a new one that they don't have in there lists. I've run spybot 3 times and it keeps comming up with no threats. I've also updated it, so i've got the newest malware lists. Any suggestions?