it's called ljzjxwi.exe and I've ended it in the task manager, killed it in process explorer, uninstalled it from the programs panel in addition to several other unrecognizable programs but it keeps popping up. What is it?

4/27/2007 5:07:17 PM

based solely on the name of the binary, i'm guessing it's a virus. viruses commonly name themselves using random characters. run SAV or something like it.

http://www.ncsu.edu/antivirus/

4/27/2007 5:12:55 PM

search for nail.exe



if you have it, you're in for a great time.

[Edited on April 27, 2007 at 5:23 PM. Reason : lol]

4/27/2007 5:23:46 PM

i'm assuming you did all of that in safe mode? Check the startup key in the registry

4/27/2007 5:38:21 PM

format c:
....
profit

4/27/2007 8:06:56 PM

Golovko's advice is the best in this thread so far, followed by mine

4/27/2007 8:09:19 PM

http://housecall.trendmicro.com/
Free online virus scan, works better than Norton's POS stuff.

4/27/2007 10:02:57 PM

startup key in registry. this sounds good, tell me more plz

4/30/2007 12:10:12 PM

I'm reading the wikipedia entry about windows registry at the moment

4/30/2007 12:34:35 PM

you really don't need to bother with the registry at this point.

This is what you need to do.

1) Boot into safe mode (tap F8 when the system is starting up, select safe mode with networking)
2) Download/install/update/run a combination of the following scanners.

Quote :

" Programs I've used at some point and liked: Lavasoft Adware http://www.lavasoft.de/download_and_buy/product_comparison_chart.php Windows Defender http://www.microsoft.com/athome/security/spyware/software/default.mspx Spybot http://www.safer-networking.org/en/download/index.html CA eTrust Spyware http://shop.ca.com/spyware/anti_spyware.aspx AVG Antivirus http://free.grisoft.com/doc/avg-anti-virus-free/lng/us/tpl/v5 Hijack This http://www.majorgeeks.com/download3155.html Free online spyware/virus scanners/removers These are pretty helpful when you think your security programs have been comprimised. Bitdefender Very nice scanner, catches alot. http://www.bitdefender.com/scan8/ie.html TrendMicro Housecall http://housecall.trendmicro.com eTrust Antivirus http://www3.ca.com/securityadvisor/virusinfo/scan.aspx For those who don't know, If you have any infection at all, always run antivirus/antispyware scans in safe mode."

As far as startup items go, learn how to use MSCONFIG.
http://www.netsquirrel.com/msconfig/msconfig_xp.html

4/30/2007 12:49:00 PM

trendmicro works very well

and doesnt hog resources

4/30/2007 10:44:24 PM

Go into safe mode, use hijack this.

Check out msconfig for what is starting up.

4/30/2007 10:53:04 PM

5/5/2007 9:46:20 AM

Quote :

"you really don't need to bother with the registry at this point. This is what you need to do. 1) Boot into safe mode (tap F8 when the system is starting up, select safe mode with networking) 2) Download/install/update/run a combination of the following scanners. Quote : " Programs I've used at some point and liked: Lavasoft Adware http://www.lavasoft.de/download_and_buy/product_comparison_chart.php Windows Defender http://www.microsoft.com/athome/security/spyware/software/default.mspx Spybot http://www.safer-networking.org/en/download/index.html CA eTrust Spyware http://shop.ca.com/spyware/anti_spyware.aspx AVG Antivirus http://free.grisoft.com/doc/avg-anti-virus-free/lng/us/tpl/v5 Hijack This http://www.majorgeeks.com/download3155.html Free online spyware/virus scanners/removers These are pretty helpful when you think your security programs have been comprimised. Bitdefender Very nice scanner, catches alot. http://www.bitdefender.com/scan8/ie.html TrendMicro Housecall http://housecall.trendmicro.com eTrust Antivirus http://www3.ca.com/securityadvisor/virusinfo/scan.aspx For those who don't know, If you have any infection at all, always run antivirus/antispyware scans in safe mode." As far as startup items go, learn how to use MSCONFIG. http://www.netsquirrel.com/msconfig/msconfig_xp.html"

Awesome advice...however, it'll all be pointless if you don't TURN OFF SYSTEM RESTORE FIRST!!! --> Right-click My Computer --> Properties --> System Restore --> Put a check in the box that says "turn off System restore on all drives."

You can always turn it back on when you are done cleaning and the virus is gone. I leave mine off...System Restore has never helped me anyway.

5/5/2007 10:23:15 PM