MOM.exe

[general_salsa]

Does anyone know if MOM.exe is dangerous or something? i have that thing in my comp but its not doinganything

[Marlo]

you sure its not mon?

[Enfeebleness]

http://www.symantec.com/smb/security...013-99&tabid=2

Creates the following files:

%Windir%%\mci1ldll.exe
%Windir%\msbrms.ini
%Windir%\sysnta.exe
%ProgramFiles%\mom\CulaterLoader.exe
%ProgramFiles%\mom\def.wrd
%ProgramFiles%\mom\mO0001.dlx
%ProgramFiles%\mom\mO0002.dlx
%ProgramFiles%\mom\mO0003.dlx
%ProgramFiles%\mom\mO0004.dlx
%ProgramFiles%\mom\mO0005.dlx
%ProgramFiles%\mom\mO0006.dlx
%ProgramFiles%\mom\mO0007.dlx
%ProgramFiles%\mom\mO0008.dlx
%ProgramFiles%\mom\mO0009.dlx
%ProgramFiles%\mom\mO0010.dlx
%ProgramFiles%\mom\mO0011.dlx
%ProgramFiles%\mom\mO0012.dlx
%ProgramFiles%\mom\mO0013.dlx
%ProgramFiles%\mom\mO0014.dlx
%ProgramFiles%\mom\mO0015.dlx
%ProgramFiles%\mom\mO0016.dlx
%ProgramFiles%\mom\mO0017.dlx
%ProgramFiles%\mom\mO0018.dlx
%ProgramFiles%\mom\mO0019.dlx
%ProgramFiles%\mom\mO0020.dlx
%ProgramFiles%\mom\mO0021.dlx
%ProgramFiles%\mom\mO0022.dlx
%ProgramFiles%\mom\mO0023.dlx
%ProgramFiles%\mom\mO0024.dlx
%ProgramFiles%\mom\mO0025.dlx
%ProgramFiles%\mom\MoM.exe
%ProgramFiles%\mom\MoMhelp.htm
%ProgramFiles%\mom\MoMPass.exe
%ProgramFiles%\mom\MoMPEEKS.exe
%ProgramFiles%\mom\MoMs.log
%ProgramFiles%\mom\moms.wrd
%ProgramFiles%\mom\NetWatch.exe
%ProgramFiles%\mom\ST6UNST.LOG
%UserProfile%\Start Menu\Programs\MoM\MoM.LNK

Updated: February 13, 2007 11:48:23 AM
Type: Spyware
Risk Impact: High
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP


Removal:
http://www.symantec.com/smb/security...013-99&tabid=3

[general_salsa]

i think its gone .... it used to always be in the process list.. now no more

wait no... how come the path is C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI.ACE\CORE-STATIC\MOM.EXE

[Enfeebleness]

I have no idea, what i come up with is from what i google, i'm not a genius behind the topic >.>

[Zag]

It's a spyware using random rootkin to hide itself

(I think...)