run-mbi16.exe virus/worm/trojan

November 23, 2005 9:59 AM

run-mbi16.exe virus/worm/trojan

I don't know what run-mbi16.exe does, and neither does the internet, as far as I can tell. AdAware tries to kill it but it reappears on reboot. I can kill the process manually every time I start my machine, but as you might imagine, that seems to be an inferior long-term solution.

Little help?

posted by Kwantsar to computers & internet (7 comments total)

If it's a matter of just killing a process, HijackThis should be able to fix it so that it is permanently disabled.
posted by rolypolyman at 10:06 AM on November 23, 2005

No idea what this is, but if you need help tracking down how it is being run I suggest you check out this list of places that viruses and trojans hide on startup. Might have some places that you haven't looked yet.
posted by chuma at 10:07 AM on November 23, 2005

I am drawing a blank with my sources. Most of the anti-virus, spyware companies are fast listing problem programs.
So i wonder: Could it be part of some software you are running(ie not bad)? Have you done a search to see where on your hard drive it lives? Do you use a french trackball, if yes there is one with the model MBI 16? Need more clues...........
posted by blink_left at 10:45 AM on November 23, 2005

To add to what blink_left said, once you find the file in Search or File Explorer, look at it's File Created date. Then do a disk-wide search for all files created on that date. This can give you some idea of what it was packaged with, or how it got there.
posted by rolypolyman at 10:55 AM on November 23, 2005

clarification: to get the File Created date, right-click on the file to bring up its properties
posted by rolypolyman at 10:56 AM on November 23, 2005

It could be something that renames itself differently on every infected machine.

Can you find the .exe , right click on it, go to properties, and see if there's any other info?

Look for the description, or check all of the info on the Version tab. Is it digitally signed? (most likely not)
posted by stovenator at 11:05 AM on November 23, 2005

kwan: plz provide all the details adware spits out when manipualting the object while you try this german ware which rules.
posted by elpapacito at 4:38 PM on November 23, 2005