duyq.exe ... Adware?

Joined
Apr 7, 2003
Messages
2,315
As I type this, my computer has no less than ten instances of duyq.exe running, each taking about 10 megs of my memory up. Googling this file name turns up nothing. I just ran Ad-aware and it found that I have "Adtomi", which I had it remove.

ZoneAlarm found duyq.exe trying to access the internet, which I blocked.

Anyone recognize this file?
 
No, I don't recognize the file, but I know what you're talking about. If running Adaware and Spybot S&D doesn't kill it, do a search on your computer (Start Menu -> Search) for the file name, and delete it (or them). If you can't delete them because they're "in use" or some such crap, write down the file paths, load your computer in DOS, and delete them from there (if you remember how).
 
Um,i 'd suggest a different (more careful) course of action. Get ProcessXP (Process Explorer) or some similar utility that will show all the files used/held open by a process. Then don't rush to to delete those files right away,first check out what they are all about (use some hex editor or something like that to read the files and look just for meaningful text strings - there's bound to be an URL somewhere inthere, maybe a Company name, etc.).

When you have this information do another search on Google and maybe it'll come up with something (instructions for removalthat might consist of something more complexthan just deleting stuff, as was the case with one of the trojan spyware pieces i got a couple of months ago and no Ad-aware or anti-virus or similar software woudldetect or remove).

If nothing comes up onGoogle again just try to kill all the instances of that process in Task Manager.Check out whether anything stopped working in your computer. If everything still works as expected and new instances of this process have not been spawned by another process just proceeed to deleting all the files you saw in ProcessXP (use windows search to find their exact location once you get the filenames) and all the files referenced within those files (the search in editor i mentioned earlier on). At the same time search the registry for references to any of the files you're about to delete - you're likely going to have to remove all of those references (use some common sense when interpreting various entries) otherwise you'll get complains about missing files and whatnot from Windows that'll pester you forever.

If new instances of this process get spawned try killing off various processes, starting with the ones that don';t belong to the system first and check which process it is that respawns that spyware. Look it up onGoogle and run through the entire procedure for this "master" process first, then proceed to eliminating the one you posted about. There are likely to be 2 or 3 processes "guarding each other's back" so it takes some effort to get rid of crap like that.

If you're unsure about any step of the way do ask, don't play a hero and ruin wreck your computer :)
 
If it is something bad, and you cannot get rid of it, jsut change the file name...works for me!
 
Back
Top