Page 1 of 1
Hrmy.exe
Posted: Sun Feb 13, 2005 1:06 pm
by Triple6_wild
k well i found this .exe trying to connect to a site and it looks like adware to me but pcpitstop and ad-aware both dont see it
i searched google and havnt found much on it so b4 i go and kill it i want to know what it is and what it does so if anyone knows plz do tell
found the bugger Xhrmy.exe in C:WINDOWS
and XHRMY.EXE-1C7E86CF.pf in C:WINDOWSPrefetch n im guessing its related
anyways the reason i think its adware is cuz the name of the site it tryed to connect to
(didnt right it down so i will post the name next time it trys to connect)
ps:
this is also an attempt to keep it active here
last time i couldnt find info on ndisuio.sys it turned into the most hit thread
Archived topic from Iceteks, old topic ID:3112, old post ID:25427
Hrmy.exe
Posted: Sun Feb 13, 2005 3:43 pm
by Red Squirrel
Sounds like spyware to me. If you get the host or IP of the site it tries to connect post it. Probably something like server42.emarketingscams.com
Archived topic from Iceteks, old topic ID:3112, old post ID:25433
Hrmy.exe
Posted: Sun Feb 13, 2005 3:52 pm
by Wren
Have you tried an antivirus scan...the file may be something other than adware?
I use Spybot Search & Destroy as well as Adaware. You have to be careful with Spybot and only fix what's pre-checked in red.
Archived topic from Iceteks, old topic ID:3112, old post ID:25438
Hrmy.exe
Posted: Sun Feb 13, 2005 5:41 pm
by Triple6_wild
well pcpitstop did not pick it up as spyware or a virus so it may be somthing new
but the site it tryed to connect to looked like a type of spyware .... it will try to reconect when i restart my computer lol i dont really feel like doing it now tho so i killed it in taskmanager for now
Archived topic from Iceteks, old topic ID:3112, old post ID:25446
Hrmy.exe
Posted: Sun Feb 13, 2005 9:37 pm
by Wren
http://research.pestpatrol.com/Analyses/20...1-15_031645.asp
You might have a look here...never hurts to get a second or third opinion.
Archived topic from Iceteks, old topic ID:3112, old post ID:25453