Xkxmnojs.exe?

[My-SS]

I have / had "antivirus windows XP 2008" , desktop background changed to white screen with some antivirus warning screen on it, task manager disabled, display properties "background" tab missing ,and a bunch of other crap on my pc.

Oh, and my clock has been changed to a 24 hr setting (still is, don't know how to change it back to 12 clock)

I followed the 8 steps listed at top of forum.. Now nothing picks up anything,
Computer working MUCH better..Thanks...

HOWEVER ..this "xkxmnojs" (xkxmnojs.exe) appeared on my desktop and says it was created 3 days ago.
I did a multiple internet search and found NOTHING.

I have not clicked on it to open it.
I have tried to delete it, but it says it is being used by another program or person.
Made sure all other users were looged off...no help..
rebotted in SAFE MODE ..same thing..
Does not show up in processes in task manger..
Have scanned it with trend mirco, spybot, super antivirus,malwarebytes....they all say it is safe..

If I can not delete it, I doubt it's safe. but I don't claim to be smart at all about any of this.

Does not show up in "add / remove programs"

Any ideas on WHAT it is and HOW to get rid of it?

here are results of scans

thanks,
DH

 

[kimsland]

Please Disable System Restore (howto)

Then download Move On Boot from h e r e

Once installed click on Start--> All Programs -->GiPo@Utilities-->MoveOnBoot
Paste this exactly in the white area: %userprofile%\Desktop\xkxmnojs.exe
Click next, and then select Delete select Start

Restart
Confirm ]%userprofile%\Desktop\xkxmnojs.exe has in fact been deleted

If it has gone, please re-enable System Restore

Reply back with the result
------------------------------------------------------

Your clock setting

Go to Control Panel
Open Regional and language settings
Click on Customize button, then Time tab
Change it to h:mm:ss tt

 

[Kazi]

Or you can try using malwarebyte in the misc tools is something called file assasin. click on run tool and in the little window that opened highlight that exe and press enter

 

[My-SS]

Thanks Kazi,

Simple , Fast, GONE !!!

So looking at my attached files, did I need to do more??

Thanks

Won't do it tommorow though, going to lake for probably last time this year and watch
100+ mph boats run...and chill

 

[Kazi]

On hijackthis log
check these and fix check

O2 - BHO: (no name) - rsion - (no file)
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7

 

[My-SS]

Thanks kimsland.
Thanks kazi
My system is working good again.

Thank You
DH

 

[kimsland]

Thanks for the update :grinthumb