1.

Solve : kdojf.exe??????

Answer»

Using my Trojan remover 6.2, I get a kind of info that the software can not open the .exe......I do not know what this kdojf does or stands for...is it a trojan file itself? Found the kdofj.exe file in C:\windows\system32\

have XP(SP2 and all updates done), IE70, Sygate/AVG..both, 4.2Ghz, 2048RAM

and yes I googled first...nope nothing..Many viruses/trojans/etc creates executables with random file names. Considering the filename and the placement I'm leaning towards this being malware.
Have you scanned it with AVG?
You can also try scanning it with a whole range on AV programs by UPLOADING the file to this site.
http://www.virustotal.com/WWWWWWWWOOOOOOOOOOOOOOOWWWWWWWWWWW, that was GOOD advise, using that websitescanner...incredible, this should everybody get to know here on this board!!!!!!!!!!!!!!!!!!!!!! Result=Troan...lol....but incredible that both Windows and AVG DO NOT find this bugger!!!!!!!!!!!!!!!!!!! THANK YOU SO MUCH.....wish the machine this website uses was a software....
*******************************************
File kdojf.exe received on 09.12.2007 15:10:19 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED


Result: 16/32 (50%)
Loading server information...
Your file is queued in position: 3.
Estimated start time is between 48 and 68 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Print results
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:


Antivirus Version Last Update Result
AhnLab-V3 2007.9.11.1 2007.09.12 -
AntiVir 7.6.0.5 2007.09.12 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2007.09.12 W32/ZlobP.Y
Avast 4.7.1043.0 2007.09.11 Win32:ChanCrypt
AVG 7.5.0.485 2007.09.12 -
BitDefender 7.2 2007.09.12 Trojan.DNSChanger.BF
CAT-QuickHeal 9.00 2007.09.11 (SUSPICIOUS) - DNAScan
CLAMAV 0.91.2 2007.09.12 -
DrWeb 4.33 2007.09.12 -
eSafe 7.0.15.0 2007.09.11 Win32.Zlob
eTrust-Vet 31.1.5128 2007.09.12 -
Ewido 4.0 2007.09.12 -
FileAdvisor 1 2007.09.12 -
Fortinet 3.11.0.0 2007.09.12 -
F-Prot 4.3.2.48 2007.09.12 W32/ZlobP.Y
F-Secure 6.70.13030.0 2007.09.12 Trojan.Win32.DNSChanger.kx
Ikarus T3.1.1.12 2007.09.12 MemScanTrojan.Dnschanger.BF
Kaspersky 4.0.2.24 2007.09.12 Trojan.Win32.DNSChanger.kx
McAfee 5117 2007.09.11 -
Microsoft 1.2803 2007.09.12 -
NOD32v2 2524 2007.09.12 -
Norman 5.80.02 2007.09.12 -
Panda 9.0.0.4 2007.09.11 Rootkit/XXXAccess
Prevx1 V2 2007.09.12 -
Rising 19.40.22.00 2007.09.12 RootKit.Win32.Access
Sophos 4.21.0 2007.09.12 Mal/EncPk-AQ
Sunbelt 2.2.907.0 2007.09.12 Trojan-Downloader.Zlob.Media-Codec
Symantec 10 2007.09.12 Trojan.Zlob
TheHacker 6.1.10.184 2007.09.11 -
VBA32 3.12.2.4 2007.09.12 -
VirusBuster 4.3.26:9 2007.09.12 -
Webwasher-Gateway 6.0.1 2007.09.12 Trojan.Crypt.XPACK.Gen
Additional information
File size: 65047 bytes
MD5: 588f0ddd66a2e8c40ba2c461335223a3
SHA1: e3fa2756572f14adb4a191bb243ddc98b61a6bb 7
packers: PECRYPT
Sunbelt info: Trojan-Downloader.Zlob.Media-Codec is a program that typically purports to be a needed upgrade to Windows Media Player in order to view adult oriented videos on certain websites. However, Trojan-Downloader.Zlob.Media-Codec actually downloads and installs additional malware on the user's machine.


ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.


You may want to scan your computer with an online virus scanner and see if it picks up more of this infection.
I would suggest Kaspersky or F-Secure since they both detect it.yes i MIGHT...have been using AVG for so long and earlier on I used the norwegian version of F-Secure for many years but they became unaccurate, so I skipped it...but well, hey they might have developed too or Kaspersky, which sounds more like a name from a James Bond Movie...lol..thanks again for your great advise...cool show... The ones Kaspersky found were in the C:\system Volume Information catalogue, a catalogue I can not access it seems...how do I get those trojans out of my system? I've replied to your PM so check it for instructions.
To anyone else that might be interested, to get rid anything in the "system Volume Information" folder you have to clear your system restore points.



Discussion

No Comment Found