nalzv.exe/k

[cal_tony]

Nalzv.exe/k This may not be the forum for this issue but so far I have not been able to find out where or how this program appeared on my hard disk. It seem to be involved somehow with Internet Explorer? A microsoft search and a google search revealed nothing. I believe that this exe accompanied some program that I downloaded regarding Dvd programs. It installs itself in the system32 dir. and in the registry as machine run once and user run once. I have deleated this program and its registry entrys over and over again and it just keeps reappearing again. My XP ser pack2 spyware checker informs me when it trys to reinstall itself. Yet a check of my disks indicate the program isn't anywhere until it installs itself. Anybody know what this exe is ?

[Capmaster]

Moving this to Computer forum ...

[ViRaL1]

Some spyware programs generate randome filenames.
What's the path to the file?
Is it loading in memory?
Does it show up in MSCONFIG?

[cal_tony]

Path to the file is C:windows\system32\nalzv.exe/k
the size of the file is 22kb
it does not appear in msconfig but it does appear in another start up manager that I have
About memory, I don't know But I would suppose so.
Any Idea about how to find the program that starts it?

[Soopafresh]

Turn off system restore

Restart PC in Safe Mode

Run your Spyware fixer app

Keep fingers crossed

Reboot

[BJ_M]

well that word only shows up on a russian gay site and a garden site using google ..

http://www.google.ca/search?hl=en&q=Nalzv&btnG=Google+Search&meta=


i would open it with notepad and see if you can read anything in the file ...

or just change the name and see if any warning or something doesnt run ..

[BJ_M]

most likely im guessing its part of a bat file - cus of the /k switch

You can use the /k switch with the AT command to troubleshoot a scheduled batch job. The /k command allows you to manually run the batch job. To do so, type the following command at the MS-DOS command prompt, where xxx is the time in hours and minutes:
at xxx /interactive cmd.exe /k
When you use the Windows Resource Kit utility Soon.exe, you can simplify this command so that it runs in the next 5 seconds automatically. To do so, type the following command at a command prompt:
soon /interactive cmd.exe /k
Both of these commands open the MS-DOS command prompt at a scheduled time and allow you to manually run the batch job.

If an MS-DOS command prompt does not open, start the Services tool in Control Panel, and then confirm that the Schedule service is started. Click the Startup button, and then confirm that the System account is selected; only the System account can interact with the desktop. Network connections made under the System account use a null session for credentials; therefore, you may have to supply a user name and password for commands such as net use.

Before you run your batch job, type the set command. When you do so, all environmental variables including the user name are listed. This command helps you understand the environment that the command scheduler is running in.
MORE INFORMATION
When you run the AT command line that is described in the preceding section, you can troubleshoot situations where a batch job runs successfully when it is executed from the command line, but it does not run when you execute it using the AT command.

In addition to troubleshooting the batch job, do the following:
1. Include the echo and pause commands in your batch file so that you can narrow the cause of the problem.

[BJ_M]

in other words - its prob. a bad thing

[cal_tony]

BJ_M
thanks for the note on the Russian Gay site but since I don't read russian I never bothered to examine it and since I'm not interested in gardining or better put, since gardining has little to do with DVDS I didn't look there either. I did however, think that only 2 occurances of the file name was strange. Right now the file is not on my computer but every time I start it up, it in short order wants to be installed. I have copied all of your suggestions to my desktop and will follow your recomendations one by one. The next time my spyblocker pops and asks if its ok to allow this program I will allow it and follow it from there.
Another strange about it is that although it shows up as being in system 32 it is not found there but found in windows\prefetch. In time, I will sort this out, but thought that rather than spend so much time on it I would ask for help I thought there might be an easy answer like such and such software has this as a carrier. So thank all of you for your suggestions