msblds.exe

[marc69]

lo guys,

Right, basically my firewall keeps popping up and is stating that this file "msblds" is trying to create a directory in i think "C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5". It hasnt popped up again on the firewall for a while so i cant be sure.

The other thing the firewall will come up with is "msblds.exe" is trying to access the internet yatatata.

I've searched google for the file to no avail, I've removed the file and it just comes back (Tried in safe mode aswell).

Done a spyware scan and a full search with nod32.

The file is in "C:\WINDOWS\system32"

Bit more info - http://i37.tinypic.com/mm4siw.jpg

Clueless now, any ideas?

 

[GeForce]

Run HijackThis and look for anything suspicious and/or related, do the same thing in the startup tab of msconfig. Make sure you know exactly what every thing is, and disable any you don't.

 

[marc69]

I had a few "Un-needed" things which I've removed now (Creative register product dll) some other random stuffs, and it seems to of gone away.

Lets see how long it stays away for \o/

Cheers

 

[GeForce]

Good stuff, hopefully that's sorted it!

 

[marc69]

Hey Again,

So my Firewall decided to inform me that this file was deciding to create entrys again so i selected nod32 to quarantine the file and now im confronted with http://i35.tinypic.com/2l9d7b.jpg

The firewall also told me that the file MSBLDS.EXE was trying to connected to a specific ip. I googled the IP and its something to do with a rootkit.

Yeah, completely over my head.

Gief Help!

 

[marc69]

le bump