File: oegcrhsa.exe
Posted on 15. Sep, 2009 by Robert in Internet
Today while I was out at one of my clients, they gave me a laptop and told me its doing funny things.
When I booted the computer up the first thing I saw as I logged into windows was a whole bunch of error messages looking for a file called: oegcrhsa.exe. I have never heard of such a file in my life, and could not find any programs related to oegcrhsa.exe. Every time I closed the error messages they just popped up again. I then tried to kill the process of oegcrhsa.exe in the task manager and saw that it was using 99 to 100% of the CPU. I ended the process and it just started up again.
I eventually got rid of the file:
The file: oegcrhsa.exe seems to be some kind of trojan or virus. I’m not sure where it comes from or how it got there. msconfig and regedit was disabled and I could not get any of those tools to work. It also made bit defender to crash. So those options of removing the file was disabled.
I eventually found the file located in c:\oegcrhsa.exe I deleted it, and it gave me no trouble. 2 minutes later, it was back and was causing trouble again.
I rebooted and went into safe mode to try and get rid of the file. No error messages popped up in safe mode, I deleted the file in c:\oegcrhsa.exe and rebooted again. Problem solved. (I think).
The best advice I would give when you have the file oegcrhsa.exe cuasing trouble, is to go into safe mode, delete the file on the c:\ and reboot. I would also highly recommend running Spybot S&D and a anti virus program such as Bit Defender.
I don’t have much info on the file, but what I did above got rid of the oegcrhsa.exe error messages. If you have anything else happening to your system, let me know. If you solved the problem another way or know what the file is doing, please leave a comment and let us all know how you did it.
Popularity: 5% [?]












Jason
Sep 16th, 2009
I have that running in my processes right now.. it isn’t using too much memory or cpu speed though.. I’ll that out.
Thanks
(Hmm.. scanning it showed that it “wasn’t malicious” >.> New or rare?
Robert Jooste
Sep 16th, 2009
I think the OEGCRHSA.EXE process is quite new. As I have not yet been able to find out where it came from or what exactly it does.
oegcrhsa.exe file information
Sep 16th, 2009
[...] I explained here: OEGCRHSA.EXE you can just delete it in safe mode. Something else I thought of during the day, If you are unable [...]
Robert Jooste
Sep 16th, 2009
@Jason What operating system are you running? Windows xp?