Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Anyone know what a sjjlth.exe is?


  • Please log in to reply
9 replies to this topic

#1 arrina_kiss

arrina_kiss

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:09:40 PM

Posted 16 February 2005 - 02:57 PM

Hello.

Please forgive me if I have chosen the wrong message board for this...I am new to the group.

I was wondering if anyone has heard of this file.....sjjlth.exe

I have this in my reg start up & have not a clue as to what this is.
I have been unable to find any info on it & was wondering if anyone could tell me what this is....what it's good for ....should it be there or not.

Thank you for any help

Arrina

BC AdBot (Login to Remove)

 


#2 Leurgy

Leurgy

    Voted most likely


  • Members
  • 3,831 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Collingwood, Ontario, Canada
  • Local time:08:40 PM

Posted 16 February 2005 - 04:15 PM

Hi arrina_kiss and welcome to BC

It doesn't look to be a valid file to me. Perhaps you could answer a few questions.

What is your operating system? Where is this file located? Is it associated with any particular program? How is it you came to find it?

When the only tool you own is a hammer, every problem begins to resemble a nail. Abraham Maslo

**** We use our powers for good, not evil ****

 Trying to remove your data from the web is like trying to remove pee from a swimming pool


#3 phawgg

phawgg

    Learning Daily


  • Members
  • 4,543 posts
  • OFFLINE
  •  
  • Location:Washington State, USA
  • Local time:05:40 PM

Posted 16 February 2005 - 04:22 PM

The startup list that you can click at the top of any page here at BC
is a great resource to use, and in the case of that file you would get no
return, which is a clue it's probably no good.

You can also upload it to this site for individual analsis, free.

Virus Total. Just hit "browse" and find it, submit it, and wait a little bit.

It'll tell you if it is good or bad, based on several anti-virus company's
definitions. Having so many used in the single scan improves your
chances of the results being conclusive.

Welcome to bleepingcomputer.com, arrina_kiss. :thumbsup:
patiently patrolling, plenty of persisant pests n' problems ...

#4 arrina_kiss

arrina_kiss
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:09:40 PM

Posted 16 February 2005 - 04:36 PM

well, my OS is XP PRO....I found it both in my start up & in the SYSTEM32 folder.
As far as I have been able to see, it is not associated with anything as well as I have not been able to find any info on it.
I found it while doing a manual clean up/check for Viruses/Trojans/spyware etc.


I will check VIRUS TOTAL
Thank you for your help & suggestions...any other info on this would be very much appreciated


Arrina

#5 phawgg

phawgg

    Learning Daily


  • Members
  • 4,543 posts
  • OFFLINE
  •  
  • Location:Washington State, USA
  • Local time:05:40 PM

Posted 16 February 2005 - 04:43 PM

Let us know what Virus Total turns up.
If it is a bad file, we might be able to use it for testing
and have you zip it into a folder and email it to us. :thumbsup:
patiently patrolling, plenty of persisant pests n' problems ...

#6 arrina_kiss

arrina_kiss
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:09:40 PM

Posted 16 February 2005 - 04:51 PM

Not to sure if my last reply was posted so I will re-post just in case.....

TOTAL VIRUS said this.......


Results of a file scan
This is the report of the scanning done over "sjjlth.exe" file that VirusTotal processed on 02/16/2005 at 22:41:44 (CET).

Antivirus Version Update Result
AntiVir 6.29.0.14 02.16.2005 no virus found
AVG 718 02.14.2005 no virus found
BitDefender 7.0 02.16.2005 Trojan.Agent.AY
ClamAV devel-20050130 02.14.2005 Trojan.Agent-27
DrWeb 4.32b 02.16.2005 Trojan.DownLoader.1518
eTrust-Iris 7.1.194.0 02.16.2005 Win32/SillyDl.CS!Trojan
eTrust-Vet 11.7.0.0 02.16.2005 Win32.SillyDl.CS
Fortinet 2.51 02.16.2005 W32/Dloader.KL-tr
F-Prot 3.16a 02.15.2005 security risk named W32/Backdoor.NM
Kaspersky 4.0.2.24 02.16.2005 Trojan.Win32.Agent.ay
NOD32v2 1.999 02.15.2005 Win32/Agent.AY
Norman 5.70.10 02.15.2005 W32/Agent.AHB
Panda 8.02.00 02.16.2005 Adware/Twain-Tech
Sybari 7.5.1314 02.16.2005 W32/Agent.AH
Symantec 8.0 02.16.2005 no virus found


Could anyone explain the results to me plz?

Thank you....Arrina

#7 phawgg

phawgg

    Learning Daily


  • Members
  • 4,543 posts
  • OFFLINE
  •  
  • Location:Washington State, USA
  • Local time:05:40 PM

Posted 16 February 2005 - 04:53 PM

It means of all the cooperating companies
several determined that file to be Trojan related.

Bad file, in other words

which also means two things:
I'd like for you to post a hijackThis log so we can help
you get rid of it and all the related infection files on your PC...
How to do that will help you accomplish that correctly.

Also if you'd like, you can copy the file from either location to your desktop.
Make a new folder on your desktop, and drag that bad file into it.
right-click that folder and choose "Send To"-->compressed (zipped) folder
and then use your email to browse, find, and attach it to a message
addressed to phawgg"at"gmail.com (replacing the "At" with @)

The file send is entirely optional,
but you should definately post a HJT log,
to get rid of the problem(s) you have, if you have any question(s)
about the overall status of what's on your PC.
Be patient,
as it does take some time to get an exact step-by-step
reply posted after you have, OK?

Edited by phawgg, 16 February 2005 - 05:04 PM.

patiently patrolling, plenty of persisant pests n' problems ...

#8 arrina_kiss

arrina_kiss
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:09:40 PM

Posted 16 February 2005 - 05:01 PM

Figured as much....Thank you for "Dr.SEUSS"ing it for me ;)

I will delete and send BC a copy of the file for "testing"

Again, thank you so very much for all your help.


Arrina

#9 phawgg

phawgg

    Learning Daily


  • Members
  • 4,543 posts
  • OFFLINE
  •  
  • Location:Washington State, USA
  • Local time:05:40 PM

Posted 16 February 2005 - 06:10 PM

I will split your HJT log post off of this thread and place it into the section
(forum) we use for the Hijackthis Logs. That way it will get seen. :thumbsup:

Edited by phawgg, 16 February 2005 - 06:13 PM.

patiently patrolling, plenty of persisant pests n' problems ...

#10 arrina_kiss

arrina_kiss
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:09:40 PM

Posted 16 February 2005 - 06:39 PM

Thank you so very much phawgg

I e-mailed the zip fil I hope you can learn something from it.

Thank you again for all your help.

Arrina




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users