process 1732

[sell2ucheap]

hello everyone...my question..i use zone alram with xp pro os....today i noticed a process 1732 trying to access the internet..
the associated application is rxpmmy.exe..i am not allowing it to connect but i have never seen this one before,,have been unable to find any info on it so if anyone knows anything please share it with me..thanking you all in advance..:t

[SJG437]

Stumped me good this time :eek: I've searched several groups, meta-search engines, pacs, etc... to no avail. Are you 100% sure you've got that name right?

[Rocketmech]

Could be the file is randomized ...I'm sure you've scanned for malware by now. Try renaming the file , then see if ite recreated. Look for its creation date for hints when it got onboard, etc. Meantime clean all your temps ...

[G]

This should be very easy to figure out.

I could not find any information on rxpmmy.exe using Google so we will have to investigate further to determine rxpmmy.exe veracity and legitimacy.

Using Windows search, input rxpmmy.exe

If the path to this file does not have its own folder in C:\Program Files, then you must treat it as suspicious.

Now if the file is found to have the path name:

C:\WINNT\system32
C:\WINNT\system
C:\WINNT
C:\Documents and Settings\Administrator\Local Settings\Temp (Administrator can also be account holder) – and check ‘Show hidden files and folders’.

Then it will be a Trojan etc. Just delete it.

If you cannot delete it, get back to me.