PDA

View Full Version : ocqaovqf.exe?


croft94
25-12-08, 17:25
I just restarted my Vista (I turned off User Account Control <UAC>) and on startup an"Open File - Security Warning" window popped out.

The file was ocqaovqf.exe
I tried googleing it but it had no results. I don't know if I should let it run or not.

spikejones
25-12-08, 17:35
if you arent sure what it is for, dont let it run. then you should run a virus scan as well as a spyware scan. you can also post a report of ardiag.exe (http://www.tombraiderhub.com/download/ardiag.exe) for inspection.

croft94
25-12-08, 17:44
I scanned it and it said it was clean. I still wont let it run though. Thanks.

tomblover
25-12-08, 18:16
I say: Don't run it. The filename sounds really dodgy.

Punaxe
25-12-08, 18:33
If Google doesn't know it it's quite possible it's a random filename. Randomizing filenames is a technique that viruses/malware often use, so yeah... Might want to get rid of it even.

tlr online
25-12-08, 18:37
I had a similar (could be the same) file appear on my old system. I think it belonged to Steam, or Adobe's licensing system. I remember Google yielded no results for me either. I also deleted the file, with no problems. I never got a security warning tho, and it was passed as clean by a few virus scanners.

spikejones
25-12-08, 20:28
if you want to get rid of it, as it seems you are not having any issues with it not running you should be able to locate the file in the autorun list by using autoruns (http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx). make sure you are on the "everything" tab and do a search for it. From there you can delete the entry for it, as well as see the file path in order to locate it on your machine (if you are not already aware of its location).

EscondeR
26-12-08, 05:26
^ Exactly so... And if you want an easier :) way, run ARDiag.exe (http://www.tombraiderhub.com/download/ardiag.exe) and post the report and we'll tell you what to smack.

croft94
26-12-08, 20:06
I just deleted it :)
Thanks for your help :hug:

EDIT: I went to file properties and the product name was "newcookiestuff" :vlol:
Its gone anyway.