gojheikh.exe

Does anyone know what gojheikh.exe is? Recently, when I tried to shut
down my laptop, I got a warning message that gojheikh.exe is closing.
I waited and clicked "cancel", and then nothing happened. So I tried
to shut down again, but the same message poped up again. I clicked
"end now", and it could shut down as usual.
I wondered what happen. After I searched in my laptop, I found two
files with this name, gojheikh. One is an exe file (it is located
under C:\WINDOWS\SYSTEM32), and the other is a PF file (located under
C:\WINDOWS\Prefetch). Can someone please explain what they are for.
Thanks!

Will
Sun Aug 01 00:21:12 CDT 2004

Dennis Wang wrote:

> Does anyone know what gojheikh.exe is? Recently, when I tried to shut
> down my laptop, I got a warning message that gojheikh.exe is closing.
> I waited and clicked "cancel", and then nothing happened. So I tried
> to shut down again, but the same message poped up again. I clicked
> "end now", and it could shut down as usual.
> I wondered what happen. After I searched in my laptop, I found two
> files with this name, gojheikh. One is an exe file (it is located
> under C:\WINDOWS\SYSTEM32), and the other is a PF file (located under
> C:\WINDOWS\Prefetch). Can someone please explain what they are for.
> Thanks!


It's a randomly named executable. And since you've only provided the
name, it's anybody's guess. It's not supposed to be there, whatever
it is.


-WD

Noel
Sun Aug 01 01:45:50 CDT 2004

You may have a virus/spyware hijack

download the Stinger from here and run it to make sure that A-V-disabling
viruses are not present on your PC
http://download.nai.com/products/mcafee-avert/stinger.exe

- update your virus scanner and run a full system scan of all files.

Reboot to Safe Mode and run CWShredder - to remove variants of the
CoolWebSearch hijacker.
http://www.merijn.org/cwschronicles.html

Use CWShredder, the removal tool:
http://www.merijn.org/files/cwshredder.zip
http://www.merijn.org/files/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe
http://www.zerosrealm.com/downloads/CWShredder.zip

download AdAware from www.lavasoftusa.com, install, update, and run it to
remove spyware, adware,
and other such nasties from your system.


--
Noel Paton (MS-MVP 2002-2004, Win9x)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm
http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's

"Dennis Wang" <dennisfromtw@gmail.com> wrote in message
news:1446f649.0407311604.32cd66d8@posting.google.com...
> Does anyone know what gojheikh.exe is? Recently, when I tried to shut
> down my laptop, I got a warning message that gojheikh.exe is closing.
> I waited and clicked "cancel", and then nothing happened. So I tried
> to shut down again, but the same message poped up again. I clicked
> "end now", and it could shut down as usual.
> I wondered what happen. After I searched in my laptop, I found two
> files with this name, gojheikh. One is an exe file (it is located
> under C:\WINDOWS\SYSTEM32), and the other is a PF file (located under
> C:\WINDOWS\Prefetch). Can someone please explain what they are for.
> Thanks!

Steve
Sun Aug 01 23:30:04 CDT 2004

Dennis Wang wrote:
> Does anyone know what gojheikh.exe is? Recently, when I tried to shut
> down my laptop, I got a warning message that gojheikh.exe is closing.
> I waited and clicked "cancel", and then nothing happened. So I tried
> to shut down again, but the same message poped up again. I clicked
> "end now", and it could shut down as usual.
> I wondered what happen. After I searched in my laptop, I found two
> files with this name, gojheikh. One is an exe file (it is located
> under C:\WINDOWS\SYSTEM32), and the other is a PF file (located under
> C:\WINDOWS\Prefetch). Can someone please explain what they are for.
> Thanks!

Dennis:

As the other poster said, it sounds like a randomly generated file name.
This is a common symptom of a virus, adware or spyware. The locations of
these 2 files also suggests the same. I have had some of these installed on
my PC over the years. In one case, notepad.exe was replaced with a another
file of the same name that would generate the random named files when ever
notepad was run.

I would suggest doing a complete virus scan and then an adware/spyware scan
with Ad-aware AND Spybot S&D.

Good luck,

Steve