mshmoq.com

[Dan]

can some one tell me what mshmoq.com does?
I found it with msconfig after my dialer kept dialing on startup.
sounds like a virus, but when I check it's properties it appears to have been in my system for quite awhile.

[galaxian]

What happens when you run a virus check on it?
And, the rest of your system?

[GaryRouth]

Dan - are you sure of the spelling on that? Nothing comes up on Google, which is suspicious. If it's a randomly generated name, might be spyware/virus related, like galaxian mentions. . .

The closest legit filename I found is mshmod, but it has a different extension (msh). It's a plug in module manager for a "PlanetDNS" program. One of their programs is a remote access program, so hopefully it hasn't been cracked for use as a trojan.

Try SpyBot/AdAware & see if they come up with anything
. . . Gary

[Dan]

thanks for the replies guys...
Gary,
yes that's the right spelling. I suspected that it was a bogus file. I tried both adaware and spybot, but I think this is a rather new "thing". I suspect it is a remote access program...both adaware and spyboth found three other "harmful processes", and trendline's housecall found a couple viruses too. But none of them found this. It was listed in msconfig on selective startup. Every time I disabled it and rebooted, I would find it checked again.
I stopped that whole process by restoring a registry from two days ago. But even as I write, adwatch keeps blocking registry entiries (an entry in hikey/machine called lolcoe.exe keeps trying to be written). I guess it's off to dos to delete the booger....