Virus in Temp Running As Service?

Viruses and worms
1

Hi,
I was checking through my services list in administrative services and I came across a most odd service, listed as CYWMNX with no description, pointed at an exe file of the same name within the temp folder.

Now this isn’t the first time I’ve had problems with strange files turning up in the temp folder and running as a service, but I’ve done a reformat after each instance, and each time I can never think of any way in which they could have got there.

I’ve done a spyware scan and found nothing, and am now about to do an antivirus scan. Unfortunatly I cannot scan the file in question since it no longer seems to be present in the temp folder and I cannot find any information on this file as to whether it’s a virus.

Should I be concerned it could have done something to my system or installed something? I’ve yet to find anything and I’d like to think I maintain good security practices (anti-spyware scans, anti-virus scans etc.) However I’m highly suspicious of a brand new service running from the temp folder with no description, yet I can find no information on this particular file.

2

Use WinPatrol to monitor startup, services, etc. A very good companion to avast. It’s free and very low on resources usage.

Which programs do you use?

It’s very very suspicious… it’s most probably a sign of infection.

3

Are you, by chance, using a wireless service of some type?

4

Charley, I’m curious… which wireless service will be installed in a temporary folder?

5

None that I know of, Tech, but I am no expert on wireless services and …

Quote from: Larandor on Yesterday at 11:21:22 AM

I was checking through my services list in administrative services and I came across a most odd service, listed as CYWMNX with no description, pointed at an exe file of the same name within the temp folder.
...... indicates to me that the service he originally noticed might not be only be in a temp folder but also somewhere else on that computer. I wonder if Larandor has done a search on that computer for other incidences of CYWMNX. From a Google search, I noticed similar executables associated with various wireless services.

Hopefully, Larandor will post again soon to answer our questions.