ShellEx.EXE eating up CPU?

Is this a normal process for WinXP professional? It seems to be eating a lot of cpu time? It is in the WINNT\System32\ShellEx. EXE.

Customization Tweaking 1789 This topic was started by ,


data/avatar/default/avatar19.webp

5 Posts
Location -
Joined 2001-12-01
Is this a normal process for WinXP professional? It seems to be eating a lot of cpu time?
 
It is in the WINNT\System32\ShellEx.EXE

Participate on our website and join the conversation

You have already an account on our website? Use the link below to login.
Login
Create a new user account. Registration is free and takes only a few seconds.
Register
This topic is archived. New comments cannot be posted and votes cannot be cast.

Responses to this topic


data/avatar/default/avatar27.webp

1117 Posts
Location -
Joined 2000-01-23
That file does not exist anywhere on my system, so no, it would not appear to be normal. Have you installed anything that modifies the way the shell works? If you can't figure out why that file is there, you should do a virus/trojan scan.... and make sure you have the latest virus definitions!

data/avatar/default/avatar27.webp

1117 Posts
Location -
Joined 2000-01-23
More info.... I did a search on www.antivirus.com and found this: TROJ_ANAKHA.A - sounds exactly like what you are describing! It is classified as "low risk", but you should still get it cleaned up asap....

data/avatar/default/avatar19.webp

5 Posts
Location -
Joined 2001-12-01
OP
Thanks so much! It was a back-door trojan virus? I had McAfee Virus Scan on and it didnt detect it...talk about crappy. But, I installed Nav2002 and it found it right away. Thanks again.

data/avatar/default/avatar27.webp

1117 Posts
Location -
Joined 2000-01-23
You're welcome!
 
I just checked McAfee's virus database, and you're right, they (apparantly) don't know about this one! So kudos to Norton for picking up on this right away....

data/avatar/default/avatar27.webp

1117 Posts
Location -
Joined 2000-01-23
One more thing - I don't know how much access to your computer this trojan gives, but it would be a good idea to change your passwords, just in case....