Hey Hows it goin !  

Have any idea why I am getting this, when analyzing my start up conf.  ?

Does it mean ? what it says ?  

Name: AolSoftware
Filename: aolsoftware.exe
Command: C:\Windows\aolsoftware.exe
Description: Added by the W32/Tilebot-CL worm and IRC backdoor. This infection should not be confused with the legitimate AOL file which can be found here.
File Location: %WinDir%
Startup Type: This startup entry is installed as a Windows NT, 2000, 2003, or XP service.
Service Name: aolsoftware
Service Display Name: AolSoftware
HijackThis Category: O23 Entry  
Note: %Windir% refers to the Windows installation folder. By default, this is C:\Windows for Windows 95/98/ME/XP or C:\Winnt for Windows NT/2000.
Removal Instructions:  How to remove a Trojan, Virus, Worm, or other Malware  



This is an undesirable program.

This file has been identified as a program that is undesirable to have running on your computer.
 This consists of programs that are misleading, harmful, or undesirable.

If the description states that it is a piece of malware, you should immediately run an
antivirus and antispyware program.


MY OS: Microsoft Windows XP
Home Edition
Version 2002
AOL is my IS ?  :-?

JpSounds accurate.patio,

Can you give me an idea, why it is called AOL software ?


I mean do you know what this is ? is it part of my AOL Internet access ?
What's it all about, why would AOL do this ?

JpIt's called that because a lot of people who make malware try to disguise it as legitimate programs.  Just because it's called AOLSoftware, that doesn't mean it was put on your computer by AOL.  AOL does add an AOLSoftware.exe, but usually somewhere in the Common Files folder.  You should only have to worry if you find it in your C:\Windows folder.CBMatt,

Thanks, mind if I try to get a little more info ?,. . .

Appreciate it if you would take a look at this;

Startup Item                  Command                  
AOLSoftware           C:\Program Files\Com

                      Location
         HKLM\Software\Microsoft\Windows\CurrentVer...

Can you tell me what location is this ?

Why has this not been detected by the Prevx 1 Console installed of my system?

What is it therefore, i.e., what mischief is it up to ??   !!



Jp
I'm sure it's not exactly the same on all computers, but according to HijackThis, my aolsoftware.exe is located in the C:\Program Files\Common Files\AOL\1150582181\ee folder.  Yours should be in a similar folder.  If not, simply do a system-wide SEARCH for the file.  When you find it, go to VirusTotal, click on Browse (near the top of the page), select the file, and click on Send.  This will scan the file for you and should hopefully put your worries to rest.

Prevx1 probably isn't detecting the file because the one you have is legitimate and not malware.

That HKLM location is referring to the file's registry entry, which is HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run\HostManager.

Keep in mind that there are TWO versions of AOLSoftware.exe.  One is a trojan (look here).  One is a normal AOL file (look here) that is used for pre-loading AOL so that when you go to open the program, it will open faster.

I understand your concern, but it is most likely nothing to worry about.  However, if you're still WORRIED, you can remove the file.  It's not essential to make AOL work; it simply makes it load faster. Quote

Command: C:\Windows\aolsoftware.exe

Quote

Command: C:\Windows\aolsoftware.exe

We already know it's in his C:\Windows\ directory.  Download Anti-virus / Anti-Spyware software and run it.  That should get rid of it.

-Rock

aolsoftware        C:\Program Files\Common Files\...