rch.exe & xer.exe and my post dissappeared

computerconfuse · 06-23-2009, 02:47 PM

Hi, I posted about this earlier today but the post disappeared after 5 views. Anyone know why that would happen?

No malware or spy or AV scanner has flagged these as malicious and only pmon.exe lists them (not Task Manager or anything else). Maybe pmon.exe truncates the image name?

rch.exe
xer.exe
ex
.exe

Attached is a copy/paste of the pmon.exe output.

MikenandezNST · 06-23-2009, 03:16 PM

That may have occurred if the forum is either extremely busy or near capacity and your Thread was not in the proper section of the forum which may be the case now as you have posted in General Computer Security where you are more likely to ask things like what AV works best or does anyone know a free AV program and ect. ect.

You will probably have much more success following the instructions hereNEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

I also looked at a quick Google result on one of your processes and found thishttp://www.spywaredb.com/remove-remoconchubo/

computerconfuse · 06-23-2009, 03:33 PM

MikenandezNST, thanks for the reply. No, I'm not asking for advice on what to run to check the system or anything and realize rch.exe could be part of RemoConChubo and exr.exe could be a part of Trojan.PWS.LDPinch too.

But I've scanned and scanned with Malwarebytes, Norton 360, AVG free, AdWare, SUPERAntiSpyware Free Edition and ConboFix. I've been installing and uninstalling scanners all weekend and since a search of the computer does not find them, I can only conclude these are probably valid files with their names truncated in pmon.exe, but can't be sure. But my laptop, with a fresh install of XP Media Edition does not list them with pmon.exe. At this point I guess a better understanding of pmon.exe would do, but I can't confirm it truncates process names.

computerconfuse · 06-23-2009, 05:06 PM

For others who run into this.

Turns it they are all part of the Microsoft Desktop Search. It wasn't on my laptop yet and pmon did not list those processes. After installing Desktop Search, there they were. Pmon must truncate long file names because these were probably microsoftseaRCH.exe and windowsindEXR.com.

Thanks, and I probably have the cleanest computer on the West coast now :) Sure runs smooth. Thanks for the help.

06-23-2009, 03:16 PM	#2 (permalink)
MikenandezNST Tech, Microsoft Support Join Date: Apr 2008 Location: California Posts: 1,168 OS: Win Vista Ultimate EditionSP1/WinXPSP3 Blog Entries: 2	Re: rch.exe & xer.exe and my post dissappeared That may have occurred if the forum is either extremely busy or near capacity and your Thread was not in the proper section of the forum which may be the case now as you have posted in General Computer Security where you are more likely to ask things like what AV works best or does anyone know a free AV program and ect. ect. You will probably have much more success following the instructions hereNEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help I also looked at a quick Google result on one of your processes and found thishttp://www.spywaredb.com/remove-remoconchubo/ __________________

06-23-2009, 03:33 PM	#3 (permalink)
computerconfuse Registered User Join Date: Apr 2008 Posts: 3 OS: XP Media Center SP3	Re: rch.exe & xer.exe and my post dissappeared MikenandezNST, thanks for the reply. No, I'm not asking for advice on what to run to check the system or anything and realize rch.exe could be part of RemoConChubo and exr.exe could be a part of Trojan.PWS.LDPinch too. But I've scanned and scanned with Malwarebytes, Norton 360, AVG free, AdWare, SUPERAntiSpyware Free Edition and ConboFix. I've been installing and uninstalling scanners all weekend and since a search of the computer does not find them, I can only conclude these are probably valid files with their names truncated in pmon.exe, but can't be sure. But my laptop, with a fresh install of XP Media Edition does not list them with pmon.exe. At this point I guess a better understanding of pmon.exe would do, but I can't confirm it truncates process names.

06-23-2009, 05:06 PM	#4 (permalink)
computerconfuse Registered User Join Date: Apr 2008 Posts: 3 OS: XP Media Center SP3	Re: rch.exe & xer.exe and my post dissappeared For others who run into this. Turns it they are all part of the Microsoft Desktop Search. It wasn't on my laptop yet and pmon did not list those processes. After installing Desktop Search, there they were. Pmon must truncate long file names because these were probably microsoftseaRCH.exe and windowsindEXR.com. Thanks, and I probably have the cleanest computer on the West coast now :) Sure runs smooth. Thanks for the help.