6 Replies Latest reply on Jan 13, 2015 2:23 PM by james_otw

    Multiple Instances of idflroj.exe Running

    james_otw

      My computer recently slowed down and upon examination of running processes with procexp.exe (from Sysinternals) I noticed about a dozen instances of a program named idflroj.exe. It looked like a legitimate Google application, but obviously was not. 


      I then used autoruns.exe (also from Sysinternals) to examine my autorun entries. I noticed an odd entry under HKEY_Current_Users\Software\Microsoft\Windows\CurrentVersion\Run named mmyunxse.dll, dated 12/31/1969 6:00 PM. 


      I went into Safe Mode and removed the above entry with autoruns.exe, the dll it pointed to (C:\Users\Jim\AppData\Local\AdobeSetupUtility\mmyunxse.dll), and the directories containing idflroj.exe and its associated files (C:\Users\Jim\AppData\LocalLow\AppleComputer\ aqfqkmkk and mrigoqiori). 


      On restart the problem seems to have been fixed, but time will tell.


      Questions: 


      Has anyone else run into this problem and, if so, what did you do? 


      Should McAfee have seen this problem (malware?) on a scan? 


      What was this malware doing besides slowing down my computer? 


      Thanks,

      Jim