bbbbya.exe what is it?

I googled it but found nothing..
I searched microsoft but found nothing...
I renamed it and rebooted.. but it came up again fresh..

I've run lavasoft Ad-aware se, NAV2004, and spybot Search and Destroy..

System still is not right..

Any help?

 

Hi Skitown,

It could be a number of things, none of them good. It looks a bit Trojanny to me, but right now that is just a guess.

What OS?
What symptoms do you have?

You should start here:
http://forums.majorgeeks.com/showthread.php?t=35407

Make note of the steps you can and cannot complete. You might also try the steps in the Alternative Scans - If still having problems section of that tutorial.

Work through those steps and post back & we'll go from there.

Best luck,

PP

 

Hello PP,
I'm pushing my experience and treading uncertain waters..

I've got win98
I've saved the log files from before and after ad-aware scans.
I've done the spybot search and destroy.
Along with NAV 2004
Each comes up clean..
But there was a program or two that NAV2004 could not delete.
A google of the file led me to regedit.
I followed the steps to create back up.. then dived in.
Found again the sed.exe and the sais.exe
I deleted those and started googling the items I did not recognize.
Those that were related to spyware.. I deleted.
This bbbbya.exe was listed as part of "Narrator"
I tried to change the name in windows explorer.. but it said file in use.
I rebooted to safemode, changed the name, rebooted again and there it is.


The computer works fine...
But is running out of resources after a few hours use.
I've disconnected it from the router.. linksys conected to a cable modem..
Here is the thing.. "Something" keeps trying to connect to the internet.
I keep getting a message "Work Offline" No connection to internet is currently avail...
I'm not runing any programs to I know something not right is trying to access the internet.

Note - all these issues started two days ago while my wife was randomly surfing some train websites with my son.

If a fix was easy, run NAV or spybot or the like.. I'd be done.
But it appears to not be this easy.

doug
skitown

 

Hi Doug,
That's it. . . Blame the wife!

At first blush, it sounds like you've got Trojan problems. Try running through the tutorial that I linked and the additional Trojan steps. This will put your computer into a somewhat known state for us. Then, if necessary, we can turn to HijackThis for a log.

If we do, read the following:
http://forums.majorgeeks.com/showthread.php?t=38752

Note that HJT needs to be in its own folder C:\Program Files\HijackThis
ALL browser windows should be closed when you run it.
Save your log as a .txt file and attach it via the "Attachment Manager" tool.

I'm going to get some sleep and will check this thread tomorrow. Hang in there We'll work through this with you.

Best,

PP

 

I'll have to pick this up tomorrow..
Your server is down and I can't get to the downloads..

Thanks for pointing me in a direction

skitown

Note: I plugged the desktop back in..
The system is trying to reach: www.ad-w-a-r-e.com/callback_ron.php?guid....

I went into IE system settings and "restricted this site."
Tried to google it - but could not find anything about it..

I'll be back.

Doug
Skitown