Hi ened, I don't have that file on my computer, and like you I can't find any rerference to it. It could well be a legitimate component of something you've installed. The prefetch entry suggests that to me. Have a look at the startup components via Start - Run msconfig and see if there's a reference to it there. You could also try right clicking your installed shortcuts and see if rcibqqaw.exe is a target for any of them. If you are feeling brave you could try renaming rcibqqaw.exe to something like oldrcibqqaw.exe to see if that gives any problems before deleting it.
Believe you me I have been through this machine with a fine toothcomb since this problem manifested itself. It is not in the start-up items but could well be something legit. Most of the stuff I have installed is to do with brand names like Canon and I would have doubted that anything to do with them would be an unknown application.
Quite frankly I am just glad to have the machine running properly again and will never again run without a firewall.
I will try your last idea and rename the file. If the machine then bursts into tears......
ened, when a trojan slipped through my defenses, only zonealarm alerted me to it. I did an online scan with Ewido and that confirmes that a couple of files in my System32 folder were associated with the trojan attack. click here
I ran AVG again yesterday and it detected this particular file. It is a Trojan. It must have been sitting in the back up files because I did a System Restore at the weekend and this is the first time it has been detected. Thanks to all.
This thread is now locked and can not be replied to.