[Mokka]

Hi!
I found a very interesting process in the Task manager, named twext.exe.
In the comment, it just says: twext. I found it in the Windows/system32 directory. It doesn't communicate with the Internet. I use ESET Smart Security (NOD32 with improved firewall), it says it's clean. Also, my computer doesn't do any stupid things (like BSOD). It is a trojan? A Virus? A Malware???
Thanks in advance

[Frank4d]

It is a password stealer trojan. You can click "Report" in your post and ask to be moved to the Malware Removal forum.

[Mokka]

I can remove it with a single Shift-Del in Safe mode?

[Frank4d]

You can, but Windows may report an unable to find file error everythime you log on. Better to fix it the right way.

[cybertech]

I'll close this thread. Post a hijackthis log in the Malware removal forum.
http://forums.techguy.org/54-malware...jackthis-logs/

Click here to download HJTInstall.exe

• Save HJTInstall.exe to your desktop.
• Doubleclick on the HJTInstall.exe icon on your desktop.
• By default it will install to C:\Program Files\Trend Micro\HijackThis .
• Click on Install.
• It will create a HijackThis icon on the desktop.
• Once installed, it will launch Hijackthis.
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
• Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
• Come back here to this thread and Paste the log in your next reply.
• DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.