TimerModule.exe

Discussion in 'Windows Desktop Systems' started by Jahya, Jun 19, 2003.

  1. Jahya

    Jahya Guest

    Can anyone tell me what TimerModule.exe is? The first time I ever noticed this file was when I got nailed with a flyby dialer. I eliminated the dialer and in the process it was brought to my attention that TimerModule.exe was a suspicious entry in my startup log. Since then I have reformatted b/c I wanted to install SP2 build 1213 on a fresh install of XP Pro. I did so and all is working fine, except last night when I was playing around with the registry I came across an entry for TimerModule.exe in my satartups. I haven't deleted it yet, just renamed it to TimerModule.crap, but I'd really like to know what this file is.

    I have run NAV (defs 6/18/03), SwatIt!, and Spybot S & D and none of them found anything out of the ordinary.... If anyone could please tell me what this file is or if it is supposed to be a part of Windows or whatever I'd really appreciate it. :confused:
     
  2. Hipster Doofus

    Hipster Doofus Good grief Charlie Brown

    Messages:
    5,920
    Location:
    Melbourne Australia
    Where in the registry is it? Post it & we'll have a look at our systems.
     
  3. X-Istence

    X-Istence * Political User

    Messages:
    6,498
    Location:
    USA
    Ad-Aware, give that a try. I cant find anything about timermodule.exe on my families XP system and neither on my Win2k.
     
  4. Hipster Doofus

    Hipster Doofus Good grief Charlie Brown

    Messages:
    5,920
    Location:
    Melbourne Australia
    See if this news story helps out at all.
     
  5. Jahya

    Jahya Guest

    HKLM\..\Run: [TimerModule] E:\WINDOWS\System32\TimerModule.exe

    That's the best I can do for now b/c I'm not @ home. This was taken from a HijackThis! log file from about a week ago. I'm thinking this file may be a leftover from a dialer program that found its way onto my computer called RedLine. This dialer installed a screensaver (called RedLine) and a dialer that tried to access the internet for $6.99 p/min.... sweet eh? Luckily my firewall caught that and blocked it and then I was able to track down Redline in my Prefetch folder and the dialer 9992548.exe and the screensaver RedLine.scr in /WinNT/System32, which is also where TimerModule.exe is located.

    I'm mainly just curious, the problem will be solved tonight as I am formatting the drive an moving it and all my other drives to a new computer. Once I get XP reinstalled, I will run HijackThis! again to see if it is there after install.
     
  6. X-Istence

    X-Istence * Political User

    Messages:
    6,498
    Location:
    USA
    well, look at this. I really like the fact that broadband doesnt require dialing up.