processes - windows 2000

Hi, My firewall comes up with this process SOFEDB40.exe that is trying to gain access to my trusted area. Ive denied access because its a process i dont recognise. i have recently downloaded new antivirus and cleanup programs and wondered if it is from one of those. I have done a search on google but nothing comes up. Can anybody tell me what it is? thanks

hi mariamt,

Ive denied access because its a process i dont recognise.

the smart thing to do.

could be legit, but a search in google would most likely return some results. i would post a hjt log in this forum:
http://forums.tomcoyote.org/index.php?showforum=27

—————————–
—–>go here http://www.subratam.org and under Removal Tools link find and download—-> Hijackthis.latest version 1.99.1
Dont run it from within the zip file. Extract to a folder such as c:\Antispyware\Hijackthis\ or c:\Program Files\Hijackthis\ but not on your Desktop or a temporary folder.
This will allow us to use backups to restore entries if necessary and prevent it from being deleted when the temporary folders are cleaned out or creating its backup(s) or backup folder on the Desktop.
Or get the .exe version here http://www.merijn.org/files/HijackThis.exe or here: http://thespykiller.co.uk/files/HJTsetup.exe
they will add it to your programs file list as well as add it to the add/remove programs panel.

shelf life

once installed:
Once you have hijackthis.exe in it's permanent folder:
Start the program
Select do a system scan and save a log file. save the text file log somewhere
copy/paste the saved log in your next reply. in the above forum

Hi I posted a hijackthis log about 3 days ago, but my computer was restarting constantly so couldnt do many checks or cleanups or downloads!! so the hijack log was a bit of a mess. But managed to sort out one problem (pokapoka76) and finally got to go on the internet long enough to get some downloads etc and posted a reply to my original hijack log with a new log. My computer is running quite smoothly now but im paranoid something is gonna go wrong soon!!

was it popping up with some kinda "1:00 till shutdown" thingy?

was it popping up with some kinda "1:00 till shutdown" thingy?

No. I just got a pop-up from zonealarm saying SOFEDB40.exe was tring to gain access to the trusted zone and that it was the first time it had tried to gain access. It gave me the allow/deny option which i chose to deny.

I didn't see that exe show up on any of the win2000 processes listed on several sites. It definitely not on any of my win2000 machines. You could try searching your drive for that exe, then right clicking on the result, select properties and see if it lists anything in the version or summary section. If they are blank, I would be very suspicious of the thing. If it does list a vender, then you have a website where you can check their support section to make sure it is legitimate. Also right clicking may give you the option to scan the file with your antivirus software.

I didn't see that exe show up on any of the win2000 processes listed on several sites. It definitely not on any of my win2000 machines.

You could try searching your drive for that exe, then right clicking on the result, select properties and see if it lists anything in the version or summary section. If they are blank, I would be very suspicious of the thing. If it does list a vender, then you have a website where you can check their support section to make sure it is legitimate.

Also right clicking may give you the option to scan the file with your antivirus software.

I did a search for it, but search results found no file/folder with that name.

Hmm, that's a bit strange? Are you searching all hard drives and searching for hidden files? May have to use advanced search options. If you bring up task manager does it show as one of the running processes? If not, perhaps it has been deleted from your computer already.

No its not there. Maybe it has already been removed then.

hi mariamt,

http://forums.tomcoyote.org/index.php?showtopic=48693

Seems that i have serious problems with my puter. I had to start turning it off at the plug. Im getting advice from someone now as i had to act fast, so thanks all for your help on here. Hopefully il be posting soon with it all sorted!!!