Results 1 to 9 of 9

Thread: internat.exe process

  1. #1
    wes
    wes is offline
    Новичок
    Join Date
    Jul 2005
    Location
    Даллас
    Posts
    7
    Rep Power
    10

    internat.exe process

    Does anyone else have this process open when you press ctrl + alt + del?

    I discovered it today, searched on google for what it was, and one website stated it was a trojan keylogger. I immediately deleted from it from system32 in fear of bad things, but I soon discovered after a second google search that it is ALSO the name of the little blue icon that allows you to switch between russian and english in XP. How stupid of me. I really hope that wasn't vital to anything, but for some reason I can still switch between english and russian...

  2. #2
    DDT
    DDT is offline
    Завсегдатай DDT's Avatar
    Join Date
    Jul 2004
    Location
    I have given up the Gambling, the Wine and the Cows!.. I'm back now! ....nope Im gone again!
    Posts
    3,364
    Rep Power
    14
    It is not running on my computer.
    Let me be a free man, free to travel, free to stop, free to work, free to trade where I choose, free to choose my own teachers, free to follow the religion of my fathers, free to talk, think and act for myself. - Chief Joseph, Nez Perce

  3. #3
    Старший оракул
    Join Date
    Mar 2005
    Location
    c:\earth\usa\minnesota
    Posts
    819
    Rep Power
    10
    Well, you shouldn't have deleted it from the C:/windows/system32 folder. That is where the good internat.exe resides. The virus resides in C:/windows. Also, the icons are different. The good internat has a zip icon, while the Netsnake trojan has "?".

    If you have windows xp, it shouldnt make a difference whether you have it or not. I dont have it, and everything works fine for me.

    AVG Antivirus will take care of the trojan.

    The point is, if you see internat.exe running in the processes window, its the virus.

  4. #4
    wes
    wes is offline
    Новичок
    Join Date
    Jul 2005
    Location
    Даллас
    Posts
    7
    Rep Power
    10
    Quote Originally Posted by saibot
    Well, you shouldn't have deleted it from the C:/windows/system32 folder. That is where the good internat.exe resides. The virus resides in C:/windows. Also, the icons are different. The good internat has a zip icon, while the Netsnake trojan has "?".

    If you have windows xp, it shouldnt make a difference whether you have it or not. I dont have it, and everything works fine for me.

    AVG Antivirus will take care of the trojan.

    The point is, if you see internat.exe running in the processes window, its the virus.
    Well i'm not exactly sure if it was in system32 because I did a file search and it just appeared in the window. But thanks for the icon tip. Apparently it was the virus because i remember it having a ? icon before I deleted it. I will try AVG. Stupid human race.. terrorizing other humans with malicious computer code.

  5. #5
    wes
    wes is offline
    Новичок
    Join Date
    Jul 2005
    Location
    Даллас
    Posts
    7
    Rep Power
    10
    saibot, it appears I have found a contradiction to your comment on the icon:
    PWSteal.Netsnake collects password information, creates its own mail message, and sends the information to the intruder. It copies itself to %windir%\Internat.exe. Please note that there is a legitimate Windows application called %windir%\system\Internat.exe. The Trojan file is 82.5 KB in length and uses a zip file icon. The "real" Internat.exe is generally about 20 KB in length with a "?" icon.
    from http://securityresponse.symantec.com/av ... snake.html

    So by deleting the ? i in fact did delete the "real" internat program. Oh well. I didn't like that blue taskbar icon anyways. My alt + shift command still works so all is well. Thank you for the help, though. (AVG returned 0 infected files, by the way)

  6. #6
    Старший оракул
    Join Date
    Mar 2005
    Location
    c:\earth\usa\minnesota
    Posts
    819
    Rep Power
    10
    Thats backwards. Every other source said it the other way.

  7. #7
    wes
    wes is offline
    Новичок
    Join Date
    Jul 2005
    Location
    Даллас
    Posts
    7
    Rep Power
    10
    Quote Originally Posted by saibot
    Thats backwards. Every other source said it the other way.
    Well I don't know what to think anymore. I found mixed descriptions as well. The virus scan picked up nothing so I guess my deleting of it took care of the problem because its not on the process list. I think I will unplug my computer and weep in a corner.

  8. #8
    ST
    ST is offline
    Властелин ST's Avatar
    Join Date
    Mar 2005
    Location
    Russia, Novosibirsk
    Posts
    1,351
    Rep Power
    11
    which Windows version do you have? internat.exe is international support for win9x, i.e. if you have Russian keyboard input etc. In windows 2000\XP internat should no exist.
    The bear looked at the car, and reflections of fire danced in his eyes. He knew what to do.

  9. #9
    wes
    wes is offline
    Новичок
    Join Date
    Jul 2005
    Location
    Даллас
    Posts
    7
    Rep Power
    10
    Quote Originally Posted by ST
    which Windows version do you have? internat.exe is international support for win9x, i.e. if you have Russian keyboard input etc. In windows 2000\XP internat should no exist.
    Windows 2000. I don't know why I said XP in the first post.

Similar Threads

  1. Replies: 15
    Last Post: September 2nd, 2006, 09:01 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Russian Lessons                           

Russian Tests and Quizzes            

Russian Vocabulary