ojaoe.exe
Last Updated on Sunday, 30 September 2012 09:53 Wednesday, 22 September 2010 16:46
A file by the name ojaoe.exe is created by a computer virus program that affects the computers running on the Microsoft windows operating systems. It's analysis report is given belowThis virus installer displays a combination of Changeup worm and windows backdoor Cetorp.
Files - view
%UserProfile%\ojaoe.exe
%UserProfile%\odoy.exe
Files of this type are seen in Trojan Spyeye.
C:\usxxxxxxxx.exe\config.bin
C:\usxxxxxxxx.exe\usxxxxxxxx.exe
C:\Windows\System32\winrtsnr.txt
%AppData%\HEX-5823-6893-6818\jutshed.exe
%AppData%\ojaoe.exe
(Full path for the short folder names)
This virus program is identified as "Worm Win32 Changeup".
Read more about this virus on this page
The UserProfile folder does not contain any legitimate exe files. Therefore all exe files found in this folder are suspect. Normally in UserProfile you should find sub-folders created during the installation of Microsoft windows
There may be more files created by this virus program. You can find them out. First locate and note down the "date of creation" of ojaoe.exe, or any other file mentioned above, and after that, search the hard disk for other files created on that date or onward. See image
Necessary steps required to remove this virus program
- To remove processes created by the virus program from the Task Manager
- To search and delete files created by the virus program from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise files created by the virus program inside the hidden folders will not be found
- To remove obsolete registry keys using CCleaner
Detailed instructions and free Tools
Preventive steps to avoid virus programs
Reprinted with permission from Threatexpert.com
Vocabulary of the technical terms used in this article
| < Prev | Next > |
|---|
