Author Topic: KHATARNAK.exe windows message  (Read 3592 times)

0 Members and 1 Guest are viewing this topic.

kudursuresh

  • Guest
KHATARNAK.exe windows message
« on: December 09, 2008, 10:22:01 AM »
Dear AVAST!

I have installed AVAST! home version 4.8 in my laptop (IBM THINK PAD) RUNNING ON WINDOWS XP  professional. after scanning the system AVAST!
cleaned the system but I am getting a windows message when ever I login "windows cannot find KHATARNAK.exe make sue you type the name correctly"
 
This message is still appearing even removed it from the startup list.
 any solution ?

Thankyou,

kudur suresh

CharleyO

  • Guest
Re: KHATARNAK.exe windows message
« Reply #1 on: December 09, 2008, 10:36:56 AM »
***

Welcome to the forums, kudursuresh.   :)

KHATARNAK.exe is a worm/cloaked malware/backdoor trojan that you do not want.

http://www.prevx.com/filenames/X2803650840235781996-0/KHATARNAK.EXE.html

Do you use Yahoo Messenger?

http://www.threatexpert.com/report.aspx?uid=09cbc2c7-a2e6-4202-af9a-61b5e0b9410c


I suggest using this tool ... http://www.malwarebytes.org/mbam.php ... and please post the log text here.


***
« Last Edit: December 09, 2008, 10:39:09 AM by CharleyO »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: KHATARNAK.exe windows message
« Reply #2 on: December 09, 2008, 11:42:10 AM »
I suggest:

1. Clean your temporary files.
2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
3. Use SUPERantispyware, MBAM (like Charley suggested) or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them.
4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
5. Make a HijackThis log to post here (like Charlie suggested) or this analysis site. Or even submit the RunScanner log to to on-line analysis.
6. Disable System Restore and then reenable it again.
7. Immunize your system with SpywareBlaster.
8. Check if you have insecure applications with Secunia Software Inspector.

I also suggest that you check your startup items to see and remove the one that is trying to start the infected file.
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: KHATARNAK.exe windows message
« Reply #3 on: December 09, 2008, 03:41:50 PM »
It is possible that this is because the file has actually been removed but there is a registry entry entry left behind that is trying to run this file. Hopefully MBAM suggested by CharleyO would get rid of any redundant/suspect registry entries.

Have you had any avast or other detections recently ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security