Unknown.EXE file run by system eating up CPU

I've recently noticed a program feeding off my the CPU anywhere from 3 to 15
percent and fluctuation is constant some times makeing lad time which seems
greater than any percentage it is reporting. Have googled the file, yahoo,
Microsoft & Sony knowlegebase even the virus/malware team have never heard of
the file & nobody can find records of it its existance. Has anyone seen a
file called SONYMQAD.EXE? I belive it to be related to a media player of some
kind and the first 4 letters says it all but 45 min and after charging me $19
they have never heard of it or show any records (Not sure but am leaning
towards the belife that it is a newer version of DRM rootkit running
uncloaked). Any help?
--
ScubaIsNARKED@110

ScubaSteve,

Have the file scanned here :
http://www.virustotal.com/flash/index_en.html

Post back with the results, please.

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============


ScubaSteve wrote:

I've recently noticed a program feeding off my the CPU anywhere from 3 to 15
percent and fluctuation is constant some times makeing lad time which seems
greater than any percentage it is reporting. Have googled the file, yahoo,
Microsoft & Sony knowlegebase even the virus/malware team have never heard of
the file & nobody can find records of it its existance. Has anyone seen a
file called SONYMQAD.EXE? I belive it to be related to a media player of some
kind and the first 4 letters says it all but 45 min and after charging me $19
they have never heard of it or show any records (Not sure but am leaning
towards the belife that it is a newer version of DRM rootkit running
uncloaked). Any help?

Since Google does not bring any info most likely it is a bogus process. If
you use something like Process Explorer from SysInternals you can get more
information about the process/executable including if it using a port on
your computer and whether the file see digitally signed or not by looking to
see if it is verified in the general page. You could also try to kill it
then to see if doing such interferes with any functionality of your
computer. Of course do a scan for malware and spyware using the latest
definitions for both and also scanning in Safe Mode. If nothing detects it
as malware or spyware [at least yet] You can try to disable it from starting
up using a program such as Autoruns. Also check to see if it is installed as
a service using services.msc and if it is you can set it to disabled as
startup type and stop the service. I have seen where a new malware is not
picked up by any malware detection programs for more than a couple
eks. --- Steve


http://www.sysinternals.com/Utilitie...sExplorer.html --- Process
Explorer
http://www.sysinternals.com/Utilities/Autoruns.html --- Autoruns.

"ScubaSteve" wrote in message
...
I've recently noticed a program feeding off my the CPU anywhere from 3 to
15
percent and fluctuation is constant some times makeing lad time which
seems
greater than any percentage it is reporting. Have googled the file, yahoo,
Microsoft & Sony knowlegebase even the virus/malware team have never heard
of
the file & nobody can find records of it its existance. Has anyone seen a
file called SONYMQAD.EXE? I belive it to be related to a media player of
some
kind and the first 4 letters says it all but 45 min and after charging me
$19
they have never heard of it or show any records (Not sure but am leaning
towards the belife that it is a newer version of DRM rootkit running
uncloaked). Any help?
--
ScubaIsNARKED@110