Process Identification

Hi i need to find out some info about a process that is running on the start list of a PC using WIN XP SP2.

The process is Kimochi.exe

Thanks

 

here is what you need to find out what those running processes are and it is free procexp

 

chip magazine has this to say about that process. (translated from german)

 

Might want to put it through Kaspersky's online scan. I found a foreign language page with someone else that had it..

http://translate.google.com/translate?hl=en&sl=de&u=http://www.chip.de/forum/thread.html%3Fbwthreadid%3D700387&prev=/search%3Fq%3DKimochi.exe%26hl%3Den%26lr%3D%26sa%3DG

bigc: lol, beat me to it.

 

Thanks very much guys.

So it appears to be related to the RBOT worm?

The guy has Mcafee AV on his PC, but has only been using the WIN SP2 Firewall.
Please let me know of any further info.

thanks

 

Since there could be more than one kimochi.exe floating around....an online scan would be of benefit as Notok said.

http://housecall.trendmicro.com/
www.ravantivirus.com/scan/ (RAV)
http://virusscan.jotti.dhs.org/ (Jotti's multi-engine single file scan)
www.kaspersky.com/scanforvirus.html (Kaspersky single file scan)
http://online.drweb.com/ (Dr. Web single file scan)

http://www.giantcompany.com/antispyware/research/spyware/file-kimochi.exe.aspx

 

Thank you again.

I've found a removal tool from F-Prot, I will run that and do an online scan [have been avoiding it as the infected PC is on very slow dial up]