msswchx.exe = no threat?

Rob Action · Dec 22, 2005

The other day I opened the On-Screen Keyboard(OSK) and when I opened up task manager I noticed that msswchx.exe was running when I opened the On-Screen Keyboard. I googled the process name and found out it was Findwhatever.adware and sometimes changes the IE homepage. I've ran Ad-Aware, Spybot S&D, and avast!, none seem to pick it up. The only website that really seems to give instructions on "removal" or any detailed info for that matter is Symantec. It said the "spyware" will make chages to your registry, I checked my registry and none of those listings where in there. I rarely use IE and have never noticed any problems with ads, my homepage changing or anything out of the ordinary. Yet, when I still open the On-Screen Keyboard I see it running. I cannot even locate the file, although the Symantec website says it copies itself to some small Windows apps(ex OSK). Anyone know how to remove this or any other info about it? Thank you very much

chaslang · Dec 22, 2005

It is only a problem if not running from the correct folder. Symantec tell you this. The say %windir% which means c:\windows (or whereever your base windows folder is. Some use c:\winnt).

Thus c:\windows\msswchx.exe is bad.
But c:\windows\system32\msswchx.exe if okay.

Rob Action · Dec 22, 2005

Thank you.

I found it in the system32 folder...don't really know what to do now...

chaslang · Dec 22, 2005

You don't need to do anything! As I stated in my previous message, this is valid.

Rob Action · Dec 23, 2005

Awesome. Thank you very much

chaslang · Dec 23, 2005

You're welcome!

Log in or Sign up

msswchx.exe = no threat?

Rob Action Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Rob Action Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Rob Action Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member