What is infoas.exe?

[Raziaar]

I searched through all the search engines I know of, like google, yahoo, etc... on the file name infoas.exe and none of them come up with any proper hits explaining what the file is, like they do with all the other files.

I just noticed, after a gaming session, I ctrl-alt-delete and see a file in my system processes i'm not used to, called infoas.exe

It's registered under my computer user name, rather than SYSTEM, so I remove it, check my msconfig startup, and its not there. After ending the task in the task manager, it pops back up. Aggrivated, I go into regedit and find infoas and it finds a file, I delete it then find the file on the computer which is in the windows/config folder, but cannot remove it because no matter what, it keeps opening itself back up after removing it.

I did a diagnostic startup for windows, but to my surprise, it even boots up during that too.

What gives? Can anybody find any information on this file infoas.exe?

I'm worried its malicious.

 

[oldagerocker]

Sounds it, you done a full spyware/Virus scan?

 

[Raziaar]

Yep. I did. I wonder if because there is no information about it whether its a system process or a virus/spyware, that means i'm one of the first to be infected by a new file?

 

[Black-Falcon]

Umm...I do believe that is malicious.

EDIT: I just re-read your post...and I recognize that pattern of "regenerating" files. It is most definatly spyware. I think it might be somthing like coolweb or somthing to that extent. I got it once...wasnt able to get if off...had to reformat. I suggest backing everything up just incase everything goes to all hell.

 

[Raziaar]

Alright, now my computer is using lots of CPU cycles all of a sudden without me doing anything, and the cursor keeps flashing from normal to hourglass, again and again. Inside the process manager, the infoas.exe keeps dissapearing and repearing awfully fast preventing me from clicking and ending the task(not like that'd help). I've run anti-virus programs(avg antivirus), i've run anti trojan programs(trojan hunter), i've run anti adware/spyware programs(adaware, spybot search and destroy, spyware blaster). I know how to work the registry, and have removed the files within that pertained to infoas.exe(had a * before it, unlike the other files), but they come back as well, and have found nothing so far in relation to this program.

Also, when typing this message, my computer keeps stuttering every few seconds when I am typing. I'm getting very angry.

http://img109.exs.cx/img109/6766/Grrr.jpg

Those two files, keep reforming themselves as I remove them.

 

[Cole]

why not delete the infoas(where it is), then make a .txt file and name it(including the extension) infoas.exe

I'm not sure...you could try it..i doubt it. What usually happens is, a virus get on your comp and creates a file. I don't kinow where in the registry there is a place to start up certain files, but go through there and delete and suspicious ones.

 

[Raziaar]

If you'll notice, I did all that. Every single file assosicated in the registry with it remakes itself as soon as I delet eit, and starting up bareboned system config does not help, since the file even loads up then. <sigh>

 

[blahblahblah]

I doubt it is spyware if you can't find any information about it.

The problems you are experiencing are the reasons why people should stay out of their registry. It can cause problems like that. Especially when you are not sure if that file is spyware. I'm not saying it isn't spyware, but you don't have any evidence contrary either.

Right click on the file and click properties and then select the version tab. That should give you an idea on who made the file and what purpose the file may serve.

If in your task manager the process is showing up as your user name, you probably installed it. It could be used for anything, from Microsoft Office, to your browser, to antivirus to any number of things.

 

[Raziaar]

It is not a system file, it was put on my computer without my intent, i'll tell you that. I'm no noob when it comes to using the registry. Only once I deleted a critical file, and that was when combating bargain buddy.

I knew there was something wrong with the file, when it suddenly shows up after a good while of monitoring the process information religiously to make sure only system critical files are loaded and those that I choose at my discretion. When something new pops up, without any new installation of software, and that uses 50-90% of CPU time every few seconds, that is a good indication it isn't a legit piece of programming. Especially since spyware/trojans etc are very evident in their very definiton that they reproduce themselves no matter how many times you uninstall/delete/remove them.

Anyways... to go on, I fixed the problem. I rebooted windows, pressed f8 to go into a safe mode for windows, then proceeded to run all of my virus/trojan/spyware/adware removers, while deleting the program from the process information(which stayed gone surprisingly that time). Went into the windows/config folder and deleted the file, while going into the registry and deleting the numerous filename associations for infoas and saofni which is related to the file(I knew this by seeing the file flash into the config directory the moment I deleted infoas file before it dissapeared again.

After doing all that, and rebooting windows... I am happy to say I fixed the issue, and it is no longer a threat on my computer, and I am no longer experiencing performance hiccups when typing or doing other stuff on the computer.

And blah, don't presume to think that I am ignorant when it comes to computers. Every critical system process that windows can obtain is available on websites for the sole purpose of educating people on what is critical, and what is not, and whether they should or should not be there. I use these websites often, and they have not failed me before now, so it was very 'unusual' to find a file name that wasn't present in any of these databases. So hah!