Ok computer geeks - what is 6a7vN5O.exe? I keep deleting it from my system32 folder, It keeps coming back.?

Question

I get an internet explorer pop-up add a few times a day. I notice by going to task manager, that it has to be related to something listed as 6a7vN5O.exe. I don't even use IE very often. I have googled 6a7vN5O.exe - and notheing comes up. I have run a couple scans (antivirus and ad-aware). What next?

Answer 1

Google it. Google is your best friend.

I've done that for you.

Oh, what do you know -- no results?! That's bad...really bad.

I recommend you go to http://housecall.trendmicro.com/ and run an antivirus scan using their free online scanner. I highly recommend against installing any antivirus programs because this looks more like a trojan to me, and based upon how trojans function, there is a good chance that as soon as you install an antivirus program that your antivirus program will be nuked/melted by the trojan (which means that all functionality of your antivirus program will be killed to prevent detecting or being able to rid of the trojan).

EDIT :: By the way, I can almost guarantee you that the file is a trojan, as I have experience in this field and have produced trojans myself. :)

Now if you want to remove it manually, it would be a pain in the alpha-sierra-sierra. But I suggest running TrendMicro's Housecall (online scanner) first and seeing if that can do anything to solve your problem. If not, then you might want to try downloading Spybot Search & Destroy and scanning your computer with that. =]

Answer 2

it sounds like a virus

first thing to do is disable system restore and then boot into safemode. then run you av and see if it finds anything.

Answer 3

I DONT KNOW YOUR COMPUTER BUT IS IT A CUSTOM BUILT OR STORE BUILT LIKE GATEWAY HP ETC...  

IT COULD BE SOMETHING INTERNAL FROM THE COMPANY THAT HAS TO RUN AN PROBALY SHOULDNT BE SHOWING UP I ASSUME LIKE YOU SAID YOU TRIED TO END THE PROCESS TREE THERE

MAYBE GO TO START RUN  TYPE IN MSCONFIG HIT OK OR ENTER

THEN CLICK ON THE STARTUP TAB AN SEE IF IT IS IN THERE IF IT IS UNSELECT THE BOX CLICK APPLY THEN OK THEN HIT YES FOR THE RESTART WHEN IT RESTARTS CLICK ON THE MESSAGE DONT SHOW ME THIS MESSAGE AGAIN