jkkji.dll, yayaaxw.dll & ijkkj.ini

[wan_tp]

hey reymond..
I got another problem..
that jkkji.dll, yayaaxw.dll & ijkkj.ini
ijkkj.ini keep coming back everytime i delete it..
my computer also will shutdown when i try to delete jkkji.dll & yayaaxw.dll
what shall i to do now? ty..:(

[bardy]

wan_tp,

i'm new in this site/forum, maybe i can help.i have a graphic services (daily usb sticks are inserted in our pc's), often i encounter this kind of virus (wscript.exe, autorun.exe "once deleted will left a recyler in ur usb stick", brontok, etc.), ur av disable/deleted parts only (but not completely removed that's why it keep on coming back). kaspersky can easily detect and removed this kind of virus, nod32 too, but nod32 sometimes missed some, that's why u have to have 2 av, one is runtime, the other 1 ur 2nd option to scan files, kaspersky & nod32 r compatible, we are using both.

- use "clean autoruns" it's a batch file, very useful (i have a copy, but i forget the site where i downloaded it.)

- read the previous blog of raymond about virus, those blogs are very informative and useful. the tools u need to remove this

kind of virus, he mentioned (aimfix, unhookexec, rrt, the unlocker, openedfilesview. u can use autoruns for windows

(Sysinternals). these are the tools u need, the unlocker, autorunsis to disable the virus running processes, so that u can delete it.

- u have to search ur system and delete the component/parts (hidden files) of the virus that was not removed by ur av. to view ur hidden files, click ur explorer, tools,folder options, view, removed the check (hide protected operating system files
(recommended), click (aplly, ok). check ur local drive, u can see now all ur hidden files, (system & virus dll). or u can right click ur local drive (C:) right click,search, more advance option, check (search hidden files and folders). the safest way of searching files.

WARNING!! BE CAREFULL U MIGHT DELETE UR SYSTEM FILES instead of the virus.

- the hardest part is manually deleting the virus entry in ur registry. u have to search it manually.WARNING DON'T MESS with the registry.

DON'T FORGET TO DISABLE UR SYSTEM RESTORE before removing any virus or all ur effort to removed the virus will be wasted.

BEST OF LUCK!!!