what is hehda.exe?

Tattooed · 20 Mar 2013 at 00:42

Hi,
I was looking at program that want internet access in zone alarm ant noticed hehda.exe in C:/user\appdata\local\temp\hehda.exe.

is this a virus? Should it be allowed internet access?

I have ran AVG anti virus and spybot and nothing has come up-pls help

whitecrook · 20 Mar 2013 at 00:43

google tells me its bad

d_brennen · 20 Mar 2013 at 00:59

http://www.malwarebytes.org/

Get some MBAM loving going on. Install, update, full scan. Rinse repeat until no infected items. Will take hours. Chuck in some TDSS killer for luck

http://download.cnet.com/Kaspersky-TDSSKiller/3000-2239_4-12684178.html

Nuking an Windows Vista/7 system and reinstalling takes a couple of hours, just depends how many programs and how good your backup regime is decides if this is worth it or not

Make sure your Java runtime version is up to date, along with any browsers you use and their plug ins

Tattooed · 20 Mar 2013 at 01:00

Hi,
Thanks
What about these-
nss_handler.exe
silentsetup.exe
TODO in C:\users\tattooed\appdata\local\tmp

Tattooed · 20 Mar 2013 at 01:04

Hi,
Windows 7 is fully up to date.

Philip Perfect · 20 Mar 2013 at 08:05

Even without looking to see what the exe's are likely to be, I would be very wary of anything that is trying to run from within a temp folder!

oll3h · 20 Mar 2013 at 09:07

Looks like a nasty. Get Combofix Malwarebytes and the free 30day trial of Kaspersky internet security and run them all one at a time to remove any nastys you have. When clean go get Secunia PSI personal and run that, update software as advised.