PDA

View Full Version : What is ilka32.exe..??



s1gmeister
28-08-2004, 09:57 AM
Does anyone know what this little program does? It sits in the System32 folder, and is constantly accessing the internet (according to my ZoneAlarm).
When it's running, it causes my ADSL conx to run very slow. Disabling it using MSCONFIG gets everything running back to normal, I'm just concerned I'm disabling an important system file.
Nortons SystemWorks doesn't pick it up as a virus, nor does AdAware or Spybot pick it up as adware.

mark c
28-08-2004, 10:02 AM
From a quick Google it's a trojan horse. Sorry not much help but I would check it out through Google first.

johnboy
28-08-2004, 10:09 AM
Do a online scan here (http://www.pestscan.com/) to be safe

tweak\'e
28-08-2004, 10:14 AM
as per normal anything you don't know, block it ! thats whats ZA is for :-) then run liveupdate and update nortons. (never rely on the auto update).

johnboy
28-08-2004, 10:16 AM
Also right click on it and check properties to see if it is a recent addition .
you could also rename it and see what happens
Do you have Spybot search and destroy etc Here (http://www.safer-networking.org/)
Adaware
site (http://www.lavasoftusa.com/)
Hijack this Here (http://tomcoyote.com/hjt/)
cwshredder
here (http://www.spywareinfo.com/~merijn/cwschronicles.html)
SpywareBlaster
here (http://www.javacoolsoftware.com/spywareblaster.html)
After you have downloaded them make sure you update them.
hth

s1gmeister
28-08-2004, 11:57 AM
Thanks one-and-all.
Yep, it was a Trojan alright. I updated Lavasoft Adaware (always helps to have the latest updates...duh-oh) then it picked it up ok
Also, deleted all the registry entries with ilka32 in them, and set up ZoneAlarm to block.
As for Nortons....well...it doesn't handle spyware too well
Now my conx is quiet when I'm online and not active.....
Thanks again to all...gotta love PressF1