Aug 19, 2011
tom

Need some information about zybbb9.exe executable

Question

I’m running a Windows Server 2003 box with SP1. Task manager lists a Process named “ZYBBB9″ with the location field pointing to c:windowstempzybbb9.exe. Does any one know what this process is for?

Answer

I would generally agree that it’s probably malicious software. Some versions of the Trend Micro OfficeScan antivirus program, though, generate a randomly-named executible on each startup of the software (a “watchdog” program, according to their site).

If you’re running OfficeScan on that machine then your random executible may be an OfficeScan-generated EXE.

Related posts:

  1. svchost.exe runs at 90% CPU, tasklist /svc shows RpcSs is the culprit
  2. apache generating to many rotatelogs.exe on Windows?
  3. Svchost.exe and lsass.exe listening to non-system ports, event 861
  4. Has anyone seen gvtlsysguard.exe in the wild?
  5. Difference Between LDIFde.exe and CSVde.exe

Leave a comment