Member Avatar for jszaller

I am not a computer expert. A program KjgZWx.exe keeps trying to access the internet from my computer. Should I go into the computer and delete this file, or let it access the internet. Thank you.

  • 3 Contributors
  • 2 Replies
  • 133 Views
  • 7 Hours Discussion Span
  • Latest Post Latest Post by caperjack

Dani AI

Generated

A randomly named executable that repeatedly tries to contact the internet is suspicious, but deleting it right away can break something if it turns out to be legitimate. , the safest first move is to isolate the machine (unplug network or disable networking) so any outbound activity stops, then gather a few pieces of evidence before removal.

Short, practical steps you can follow now:

  1. Find the running process and its full file path (Task Manager or Process Explorer). Note the path, file size and timestamp.
  2. Check the file’s digital signature and properties. If unsigned and living in a user temp or profile folder, that increases suspicion.
  3. Upload the file (or the file hash) to VirusTotal to see detections across many engines.
  4. Enumerate persistence points (startup entries, scheduled tasks, services) with Autoruns so you know how it survives reboots.
  5. Run an up-to-date antimalware scan (for example, Malwarebytes) from Safe Mode or a trusted rescue environment and quarantine any positives.

Tying this to earlier replies: was right that a scan is needed, and ’s idea to collect a startup/process log is useful — but avoid blindly deleting files. If scans confirm malware, quarantine and follow removal instructions; if the infection is persistent, back up personal data (not program files), wipe and reinstall, then change all passwords. If uncertain after these steps, post the process path, VirusTotal results and autoruns output so others can help verify.

Recommended Answers

All 2 Replies

Member Avatar for dmbfan819

have you done a spyware search?

if no then try this and see if it fixes ... make sure you dont delete something you need though

Member Avatar for caperjack

That file comes up in a search ,and the other computer is infected with a Peper trojan ,please do the following .
........................................
Get The latest Version of Hijackthis 1.98.2

Download 'Hijack This!'.


Unzip (extract) it to a folder of its own.Like c:\HJT\hijackthis.exe ,

Then Doubleclick HijackThis.exe (in the new folder), and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save

Log" button.
Press that, then Ctrl-A to Select All, and copy its contents here. for

hijackthis,most of what it lists will be harmless or even essential,

don't fix anything yet.

Reboot and post a new log

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.