mom.exe Process

Eagle156

2[H]4U
Joined
Jan 21, 2006
Messages
2,242
I have noticed a strange process called "mom.exe" in the ctrl alt delete process list. My instinct tells me that it's malware but I haven't noticed anything strange happening with my computer lately. Adaware, spybot, and AVG free don't pick it up and I don't see it in msconfig. What is this process and how can I get rid of it?
 
According to this its spyware:
http://www.symantec.com/smb/security_response/writeup.jsp?docid=2006-021614-3013-99&tabid=2

I would get rid of it ASAP

From bottom of page:
# Runs silently and takes screenshot periodically or when it detects certain keywords.

# The risk's main interface is accessible by executing the program and entering a password. Both time interval between screenshots and keywords can be configured.

(( I would try to verify the same or similar files and registry keys exist first though, since you might have the 3D Model of Moscow or other legitimate software installed - http://www.mom.ru/Engl/Moredetails.htm))
 
It's also part of ATI's Catalyst Software Suite.
Hmm, I have that installed. How do I find out if what I have installed is spyware or just the CCC?
TBH, I don't think I've seen it until I installed cat 7.2.
 
Are the registry keys and files that pertain to the spyware version in your computer? Or does it point to ATI? Your going to have to go look.
 
Hmm, I have that installed. How do I find out if what I have installed is spyware or just the CCC?
TBH, I don't think I've seen it until I installed cat 7.2.

It (mom.exe for CCC) was introduced on XP in 7.2 (7.1 for Vista). You should be fine.
 
Back
Top