callinghome.biz spyware?

[Jon]

Twice now within the last few weeks I have discovered a file
"pmgxqd.exe" running in the background. It resided in my
C\Windows\System file. It is somehow associated with www.callinghome.biz
but I can't find any information about it on google. Whatever it may be
it is responsible for stealing loads of memory and slowing everything
down. I have no idea how it got in or if it has planted itself in the
registry as well as the System files.
Has anyone else experienced this menace or know anything about it?

[::Kaiba67::]

First, click this
http://www.google.com/search?q=CWShredder
and when you find CWShredder, download it
then after your done with CWShredder, click this
http://housecall.trendmicro.com/housecall/start_corp.asp
If you find any viruses, delete them.

Hope this helps,
::Kaiba67::
"Jon" <texasr...@cox-internet.com> wrote in message
news:10drd40...@corp.supernews.com...

[David W. Hodgins]

On Sat, 26 Jun 2004 12:37:41 -0500, Jon <texasr...@cox-internet.com> wrote:

> Twice now within the last few weeks I have discovered a file
> "pmgxqd.exe" running in the background. It resided in my
> C\Windows\System file. It is somehow associated with www.callinghome.biz

Searching on callinghome.biz turns up the trojan McAfee calls Downloader-KL,
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=126091
which installs the adware program they're calling Adware-Searchcentrix
http://vil.nai.com/vil/content/v_101217.htm

I have never used it, but I expect you could use their scan program, available
in dailyscan.zip, from http://vil.nai.com/vil/virus-4d.asp, to remove it.

Giving that the adware was installed by a trojan, you should be mostly
concerned with prevention of more harmfull infections. See
http://www.claymania.com/safe-hex.html for some basic info, and links
to usefull tools, etc.

Regards, Dave Hodgins

--
Change nomail.afraid.org to rogers.com to reply by email.
(nomail.afraid.org has been set up specfically for
use in usenet. Feel free to use it yourself.)

[Robert Loce]

Every few hours IE pops up with some ad and "click here to bookmark."

When I open the Windows Task Manager and look at running applications, there
is something running but the name is blank. When I look at the processes
running I see "shrinkwrap.exe" Is that program causing my problem? What
should I do about it?

Thank you
Bob Loce

[Shep©]

On Sun, 27 Jun 2004 00:49:32 GMT As another one bit the dust "Robert
Loce" <RL...@rochester.rr.com> wrote :

http://www.google.com/search?hl=en&ie=UTF-8&q=shrinkwrap.exe&btnG=Google+Search

HTH :)

--
Free Windows/PC help,
http://www.geocities.com/sheppola/trouble.html
email shepATpartyheld.de
Free songs to download and,"BURN" :O)
http://www.soundclick.com/bands/8/nomessiahsmusic.htm