What is efes.exe

A few days ago a file named efes. exe showed up on my comp, in the All Users\Start Menu\Programs\Startup folder under Documents & Settings, which I have no idea of its purpose or danger. It also seemed to show up on my bro's comp the same day.

Everything New Technology 1823 This topic was started by ,


data/avatar/default/avatar37.webp

16 Posts
Location -
Joined 2002-08-27
A few days ago a file named efes.exe showed up on my comp, in the All Users\Start Menu\Programs\Startup folder under Documents & Settings, which I have no idea of its purpose or danger. It also seemed to show up on my bro's comp the same day.

Participate on our website and join the conversation

You have already an account on our website? Use the link below to login.
Login
Create a new user account. Registration is free and takes only a few seconds.
Register
This topic is archived. New comments cannot be posted and votes cannot be cast.

Responses to this topic


data/avatar/default/avatar05.webp

214 Posts
Location -
Joined 2002-10-05
Have you installed anything lately? Take a look at properties of this shortcut, it might give you the information you're looking for...

data/avatar/default/avatar23.webp

29 Posts
Location -
Joined 1999-11-05
I would recommend removing it from the startup group...especially if you dont know what it is. It is probably something that takes up resources at a minimum.
 
I doubt if it is a virus/trojan because they usually hide themselves a little better...but you should run a scan just to be sure.

data/avatar/default/avatar40.webp

30 Posts
Location -
Joined 2003-05-26
You might try Ad Aware :
http://download.com.com/3000-2094-10045910.html?legacy=cnet
It can remove a lot of the nasty publicity you might get on the web.
Running an anti-virus would certainly not be bad!
 
It might not be a Trojan, because as BBA said there are a little more subtle but it might well be ads. Those are usually programmed with haste.

data/avatar/default/avatar37.webp

16 Posts
Location -
Joined 2002-08-27
OP
I found out that it's a polymorphic virus named W32.BugBear.B@mm !!
 
It is fairly serious because it allows the virus author to control your PC, start or stop process, etc. etc. and it's also a keylogger which sends off all you typings to one of many predefined email addressed every 2 hours. It is treatable since the June 5th, 2003 Norton Anti-Virus update.