Process Identification

Discussion in 'other software & services' started by Sweetie(*)(*), Oct 25, 2004.

Thread Status:
Not open for further replies.
  1. Sweetie(*)(*)

    Sweetie(*)(*) Registered Member

    Joined:
    Aug 10, 2004
    Posts:
    419
    Location:
    Venus
    Hi i need to find out some info about a process that is running on the start list of a PC using WIN XP SP2.

    The process is Kimochi.exe

    Thanks
     
  2. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,873
    Location:
    SW. Oklahoma
    here is what you need to find out what those running processes are and it is free procexp
     
  3. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,873
    Location:
    SW. Oklahoma
    chip magazine has this to say about that process. (translated from german)
     

    Attached Files:

  4. Notok

    Notok Registered Member

    Joined:
    May 28, 2004
    Posts:
    2,969
    Location:
    Portland, OR (USA)
    Might want to put it through Kaspersky's online scan. I found a foreign language page with someone else that had it..

    http://translate.google.com/translate?hl=en&sl=de&u=http://www.chip.de/forum/thread.html%3Fbwthreadid%3D700387&prev=/search%3Fq%3DKimochi.exe%26hl%3Den%26lr%3D%26sa%3DG

    bigc: lol, beat me to it.
     
    Last edited: Oct 26, 2004
  5. Sweetie(*)(*)

    Sweetie(*)(*) Registered Member

    Joined:
    Aug 10, 2004
    Posts:
    419
    Location:
    Venus
    Thanks very much guys.

    So it appears to be related to the RBOT worm?

    The guy has Mcafee AV on his PC, but has only been using the WIN SP2 Firewall.
    Please let me know of any further info.

    thanks
     
  6. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Since there could be more than one kimochi.exe floating around....an online scan would be of benefit as Notok said.

    http://housecall.trendmicro.com/
    www.ravantivirus.com/scan/ (RAV)
    http://virusscan.jotti.dhs.org/ (Jotti's multi-engine single file scan)
    www.kaspersky.com/scanforvirus.html (Kaspersky single file scan)
    http://online.drweb.com/ (Dr. Web single file scan)

    http://www.giantcompany.com/antispyware/research/spyware/file-kimochi.exe.aspx
     
  7. Sweetie(*)(*)

    Sweetie(*)(*) Registered Member

    Joined:
    Aug 10, 2004
    Posts:
    419
    Location:
    Venus
    Thank you again.

    I've found a removal tool from F-Prot, I will run that and do an online scan [have been avoiding it as the infected PC is on very slow dial up]
     
Loading...
Thread Status:
Not open for further replies.