unknown exe file

I have this unknow exe fie called Siae3123.exe that
resides in win/system, and everytime I use the explorer,
it appears in the temp file as well as the internet temp
file, and it is running in the background constantly thus
using up resources, and I cannot get rid of it even after
I reloaded window 98 . Any one has nay suggestions short
of reformate my hard drive.

Cal

Hi Cal,
This courtesy of MS-MVP Will Denny:
snip
Have you checked for any spyware on you system:

Ad-Aware - www.lavasoftusa.com
Spybot - http://www.safer-networking.org/
CWShredder - http://www.spywareinfo.com/~merijn/downloads.html

Also see the following link:

http://mvps.org/winhelp2002/unwanted.htm
snip
HTH,
Curt

--
W98 Support & Discussion:
http://dundats.proboards27.com/index.cgi
Windows How-tos and and Freewa
http://mvps.org/PracticallyNerded/
Windows Help & Discussion:
http://forum.aumha.org/
---
"Cal" wrote in message
...
I have this unknow exe fie called Siae3123.exe that
resides in win/system, and everytime I use the explorer,
it appears in the temp file as well as the internet temp
file, and it is running in the background constantly thus
using up resources, and I cannot get rid of it even after
I reloaded window 98 . Any one has nay suggestions short
of reformate my hard drive.

Cal


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.691 / Virus Database: 452 - Release Date: 5/26/04

Thanks Curt. I have already checked for spyware in my
system using Ad-Aware.

Cal
-----Original Message-----
Hi Cal,
This courtesy of MS-MVP Will Denny:
snip
Have you checked for any spyware on you system:

Ad-Aware - www.lavasoftusa.com
Spybot - http://www.safer-networking.org/
CWShredder -
http://www.spywareinfo.com/~merijn/downloads.html

Also see the following link:

http://mvps.org/winhelp2002/unwanted.htm
snip
HTH,
Curt

--
W98 Support & Discussion:
http://dundats.proboards27.com/index.cgi
Windows How-tos and and Freewa
http://mvps.org/PracticallyNerded/
Windows Help & Discussion:
http://forum.aumha.org/
---
"Cal" wrote in
message
...
I have this unknow exe fie called Siae3123.exe that
resides in win/system, and everytime I use the
explorer,
it appears in the temp file as well as the internet
temp
file, and it is running in the background constantly
thus
using up resources, and I cannot get rid of it even
after
I reloaded window 98 . Any one has nay suggestions
short
of reformate my hard drive.

Cal


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system
(http://www.grisoft.com).
Version: 6.0.691 / Virus Database: 452 - Release Date:
5/26/04


.

It may be a trojan, judging by the name and lack of helpful info online siae3123

Reboot into Safe Mode.
Press Ctrl+Alt+Delete, and if you see it in the task manager, select it and click
End Task.

Open the Temp folder and delete all Temp files:
-Click StartRun, type %temp% and click OK.
-Press Ctrl+A to select all, then press Delete.

Delete the Temporary Internet Files:
-Click Start Settings Control Panel Internet Options General tab.
-Click the Delete Files button, then put a checkmark in the box to Delete all
offline content, and click OK, and OK.

This should remove the copies from those two locations....check, to be sure.
Then rename the copy in the Windows\System folder to siae3123.old
If nothing complains about it for about a week, delete it.

Update your anti-virus app and then run a full-system virus scan.

Use CWShredder, the CoolWeb removal tool, available he
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://aumha.org/downloads/cwshredder.zip

In addition, install Ad-Aware 6 free edition, start it, click its 'Check for
Updates' link in the app to install updates, then use it to scan your system, and
remove what it finds.
Ad-Awa
http://www.lavasoftusa.com/support/download/

Install, update and run SpyBot Search & Destroy, scan your system, and then remove
the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?page=download

Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Press that, save the log somewhere you can find it (Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required, so do NOT fix anything yet.

Copy the log files and paste them into a new post at one of these forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm

Additional reading:
Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

http://doxdesk.com/parasite/CoolWebSearch.html
and
http://www.merijn.org/cwschronicles.html
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Cal" wrote in message
...
I have this unknow exe fie called Siae3123.exe that
resides in win/system, and everytime I use the explorer,
it appears in the temp file as well as the internet temp
file, and it is running in the background constantly thus
using up resources, and I cannot get rid of it even after
I reloaded window 98 . Any one has nay suggestions short
of reformate my hard drive.

Cal

Thanks for the detail emssage. I essentially ahve tried
evrything you mentioned, and did not have any luck. It
keeps coming back.. So, after trying everything, I opted
to reformate the ahrd drive.


-----Original Message-----
It may be a trojan, judging by the name and lack of
helpful info online siae3123

Reboot into Safe Mode.
Press Ctrl+Alt+Delete, and if you see it in the task
manager, select it and click
End Task.

Open the Temp folder and delete all Temp files:
-Click StartRun, type %temp% and click OK.
-Press Ctrl+A to select all, then press Delete.

Delete the Temporary Internet Files:
-Click Start Settings Control Panel Internet Options
General tab.
-Click the Delete Files button, then put a checkmark in
the box to Delete all
offline content, and click OK, and OK.

This should remove the copies from those two
locations....check, to be sure.
Then rename the copy in the Windows\System folder to
siae3123.old
If nothing complains about it for about a week, delete
it.

Update your anti-virus app and then run a full-system
virus scan.

Use CWShredder, the CoolWeb removal tool, available he
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://aumha.org/downloads/cwshredder.zip

In addition, install Ad-Aware 6 free edition, start it,
click its 'Check for
Updates' link in the app to install updates, then use it
to scan your system, and
remove what it finds.
Ad-Awa
http://www.lavasoftusa.com/support/download/

Install, update and run SpyBot Search & Destroy, scan
your system, and then remove
the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?page=download

Download, unzip, and run Hijack This from one of these
locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp
folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will
change into a "Save Log"
button.
Press that, save the log somewhere you can find it
(Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required,
so do NOT fix anything yet.

Copy the log files and paste them into a new post at one
of these forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm

Additional reading:
Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

http://doxdesk.com/parasite/CoolWebSearch.html
and
http://www.merijn.org/cwschronicles.html
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Cal" wrote in
message
...
I have this unknow exe fie called Siae3123.exe that
resides in win/system, and everytime I use the
explorer,
it appears in the temp file as well as the internet
temp
file, and it is running in the background constantly
thus
using up resources, and I cannot get rid of it even
after
I reloaded window 98 . Any one has nay suggestions
short
of reformate my hard drive.

Cal

.

The people at the spyware forums could not find anything in your Hijack This log
file???
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm

"Ca" wrote in message
...
Thanks for the detail emssage. I essentially ahve tried
evrything you mentioned, and did not have any luck. It
keeps coming back.. So, after trying everything, I opted
to reformate the ahrd drive.


-----Original Message-----
It may be a trojan, judging by the name and lack of
helpful info online siae3123

Reboot into Safe Mode.
Press Ctrl+Alt+Delete, and if you see it in the task
manager, select it and click
End Task.

Open the Temp folder and delete all Temp files:
-Click StartRun, type %temp% and click OK.
-Press Ctrl+A to select all, then press Delete.

Delete the Temporary Internet Files:
-Click Start Settings Control Panel Internet Options
General tab.
-Click the Delete Files button, then put a checkmark in
the box to Delete all
offline content, and click OK, and OK.

This should remove the copies from those two
locations....check, to be sure.
Then rename the copy in the Windows\System folder to
siae3123.old
If nothing complains about it for about a week, delete
it.

Update your anti-virus app and then run a full-system
virus scan.

Use CWShredder, the CoolWeb removal tool, available he
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://aumha.org/downloads/cwshredder.zip

In addition, install Ad-Aware 6 free edition, start it,
click its 'Check for
Updates' link in the app to install updates, then use it
to scan your system, and
remove what it finds.
Ad-Awa
http://www.lavasoftusa.com/support/download/

Install, update and run SpyBot Search & Destroy, scan
your system, and then remove
the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?page=download

Download, unzip, and run Hijack This from one of these
locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads...HijackThis.exe
Unzip to a folder other than your Desktop or the Temp
folder, doubleclick
HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will
change into a "Save Log"
button.
Press that, save the log somewhere you can find it
(Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required,
so do NOT fix anything yet.

Copy the log files and paste them into a new post at one
of these forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum=30
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/

The folks there will tell you what to remove.

A tutorial for using Hijack This is located he
http://tomcoyote.com/hjt/
and an in-depth tutorial is he
http://aumha.org/a/hjttutor.htm

Additional reading:
Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

http://doxdesk.com/parasite/CoolWebSearch.html
and
http://www.merijn.org/cwschronicles.html
--
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm


"Cal" wrote in
message
...
I have this unknow exe fie called Siae3123.exe that
resides in win/system, and everytime I use the
explorer,
it appears in the temp file as well as the internet
temp
file, and it is running in the background constantly
thus
using up resources, and I cannot get rid of it even
after
I reloaded window 98 . Any one has nay suggestions
short
of reformate my hard drive.

Cal

.