Applied Users Forums

General Topics => Helpline => Topic started by: Mark Rowe on June 22, 2015, 10:43:35 AM

Title: Virus?
Post by: Mark Rowe on June 22, 2015, 10:43:35 AM
One of my workstations started getting the pop "your system is infected" alerts.....ran 2 virus scans and nothing. Started poking around in processes running and found an odd entry which when google searched comes back with no entries. The file running is uhneweer.exe and it has 2 instances running...one at the user level and one at the system level. Anyone ever see or hear of it?  When ending task it seems to stay closed until a reboot.
Title: Re: Virus?
Post by: Mark on June 22, 2015, 11:15:43 AM
I would find it and submit it if you can.
Title: Re: Virus?
Post by: Mark on June 22, 2015, 11:16:07 AM
You could also try uploading it here: https://www.virustotal.com/
Title: Re: Virus?
Post by: Bob on June 22, 2015, 11:40:04 AM
Some of the digging up I could find relates to .net 4.0 which I think latest TAM version went to.  Might be false positive with your Anti-virus.

Try excluding TAM folder and TAM network drive see what happens.   I had my AV after update suddenly think an exe in the tam print check routine was a virus.  Somehow the update erased my exclusions.
Title: Re: Virus?
Post by: Jeff Golas on June 22, 2015, 11:41:54 AM
Virus...wipe and re-image (best way to get rid of that crap).
Title: Re: Virus?
Post by: Jeff Zylstra on June 22, 2015, 12:24:44 PM
There are so many "fake" viruses out there right now, that I'm curious what is generating the popup.  If it only happens in the web browser, I would say it's fairly certain that it is fake.  Btw, have you tried cleaning up the temp files yet?  A lot of evil hides in the temp files, but may not have burrowed into your operating system yet, and could be cleaned out by getting rid of temp files with CCLeaner or something like that. 

There are also several good online anti-virus websites that can check for malware that way.  Just Google them.
Title: Re: Virus?
Post by: Mark Rowe on June 22, 2015, 12:47:51 PM
Thanks for all the suggestions. Surprisingly my brain didn't go to malware (actually not surprisingly) but I'll run malwarebytes. Usually the first thing I do but my brain is struggling to leave the weekend behind.....Station is running fine now but I know there's an ant in there somewhere.
Title: Re: Virus?
Post by: Jan Regnier on June 22, 2015, 01:26:21 PM
Also clear the browser history after cleaning......if it came from the browser
Title: Re: Virus?
Post by: Mark Rowe on June 22, 2015, 01:44:27 PM
malwarebytes got rid of whatever it was.  Thanks again.