ID this application: tft4dmod.exe

[SkyBum]

I've been cleaning up my sister's family PC from spyware etc. (Ad-aware came up with 768 entries!!!) anyway, got that all under control.

There is an application listed in windows startup called tft4dmod.exe which I can't find any information on at all. I've tried multiple search engines but they all come back with no results. Under the startup tab in the System Configuration Utility it shows up like this:

Startup Item: tft4dmod
Command: tft4dmod.exe
Location: HKCU/SOFTWARE/Microsoft/Windows/CurrentVersion/Run

Seems strange that if I run a file search on this PC (including hidden files) no results are found. Huh? The application is running at startup!

Can anyone ID this app? Can't find any results through the search engines.....


Edit: The PC is an eMachines T2692

 

[YNos]

... maybe a IPv4 TFTP server... leave it on and do a portscan, port 69/udp is tftp... then again, it doesnt have to be on a specific port.... just a guess...dont hold me to it.

 

[Schadenfroh]

looks like it is a random filename generated by a trojan (my guess)

 

[bsobel]

Are you sure it's actually running at startup and that isn't just an abandonned registry entry? If so, turn off using the index service and search the drive again for the file. Once you find it, send it (zipped with a pw) to the email address on my account, I'll take a peak and see if I can ID it.

Bill

 

[kermalou]

try msn beta search