How to remove je.exe

je.exe , ahnsbsb.exe

Files size 171,401 bytes

MD5: 23EB822D3B24BA1456BEE49C1EB6CD1B

SHA-1: 9F53A4C4E21B9E2E080945E44D905C25822255F7

==================================================

C:\WINDOWS\system32\ahnsbsb.exe

C:\WINDOWS\system32\ahnfgss0.dll (0-9)

C:\WINDOWS\system32\ahnxsds0.dll (0-9)

X:\je.exe

X:\autorun.inf

(X:\ = C:\ - Z:\)

Registry Modifications

Keys Added

HKLM\SOFTWARE\Classes\CLSID\

{AF4DA69B-E1D6-469A-855B-6445294857D4}

HKLM\SOFTWARE\Classes\CLSID\

{AF4DA69B-E1D6-469A-855B-6445294857D4}\InprocServer32

HKLM\SOFTWARE\Classes\CLSID\

{AF4DA69B-E1D6-469A-855B-6445294857D4}\ProgID

HKLM\SOFTWARE\Classes\CLSID\

{AF4DA69B-E1D6-469A-855B-6445294857D4}\Programmable

HKLM\SOFTWARE\Classes\CLSID\

{AF4DA69B-E1D6-469A-855B-6445294857D4}\VersionIndependentProgID

HKLM\SOFTWARE\Classes\Interface\

{AF4DA69C-E1D6-469A-855B-6445294857D4}

HKLM\SOFTWARE\Classes\Interface\

{AF4DA69C-E1D6-469A-855B-6445294857D4}\ProxyStubClsid

HKLM\SOFTWARE\Classes\Interface\

{AF4DA69C-E1D6-469A-855B-6445294857D4}\ProxyStubClsid32

HKLM\SOFTWARE\Classes\Interface\

{AF4DA69C-E1D6-469A-855B-6445294857D4}\TypeLib

HKLM\SOFTWARE\Classes\TypeLib\

{AF4DA692-E1D6-469A-855B-6445294857D4}

HKLM\SOFTWARE\Classes\TypeLib\

{AF4DA692-E1D6-469A-855B-6445294857D4}\1.0

HKLM\SOFTWARE\Classes\TypeLib\

{AF4DA692-E1D6-469A-855B-6445294857D4}\1.0\0

HKLM\SOFTWARE\Classes\TypeLib\

{AF4DA692-E1D6-469A-855B-6445294857D4}\1.0\0\win32

HKLM\SOFTWARE\Classes\TypeLib\

{AF4DA692-E1D6-469A-855B-6445294857D4}\1.0\FLAGS

HKLM\SOFTWARE\Classes\TypeLib\

{AF4DA692-E1D6-469A-855B-6445294857D4}\1.0\HELPDIR

HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj

HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj\CurVer

HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj.1

HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj.1\CLSID

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\

Browser Helper Objects\{AF4DA69B-E1D6-469A-855B-6445294857D4}

Values Added

HKLM\SOFTWARE\Classes\CLSID\

{AF4DA69B-E1D6-469A-855B-6445294857D4}\VersionIndependentProgID]

(Default) = "IEHlprObj.IEHlprObj"

HKLM\SOFTWARE\Classes\CLSID\

{AF4DA69B-E1D6-469A-855B-6445294857D4}\ProgID\

(Default) = "IEHlprObj.IEHlprObj.1"

HKLM\SOFTWARE\Classes\CLSID\

{AF4DA69B-E1D6-469A-855B-6445294857D4}\InprocServer32\

(Default) = "%System%\ahnxsds0.dll"

ThreadingModel = "Apartment"

HKLM\SOFTWARE\Classes\CLSID\

{AF4DA69B-E1D6-469A-855B-6445294857D4}\

(Default) = "IEHlprObj Class"

HKLM\SOFTWARE\Classes\Interface\

{AF4DA69C-E1D6-469A-855B-6445294857D4}\TypeLib\

(Default) = "{AF4DA692-E1D6-469A-855B-6445294857D4}"

Version = "1.0"

HKLM\SOFTWARE\Classes\Interface\

{AF4DA69C-E1D6-469A-855B-6445294857D4}\ProxyStubClsid32\

(Default) = "{00020424-0000-0000-C000-000000000046}"

HKLM\SOFTWARE\Classes\Interface\

{AF4DA69C-E1D6-469A-855B-6445294857D4}\ProxyStubClsid\

(Default) = "{00020424-0000-0000-C000-000000000046}"

HKLM\SOFTWARE\Classes\Interface\

{AF4DA69C-E1D6-469A-855B-6445294857D4}\

(Default) = "IIEHlprObj"

HKLM\SOFTWARE\Classes\TypeLib\{AF4DA692-E1D6-469A-855B-6445294857D4}\1.0\0\win32\

(Default) = "%System%\ahnxsds0.dll"

HKLM\SOFTWARE\Classes\TypeLib\{AF4DA692-E1D6-469A-855B-6445294857D4}\1.0\HELPDIR\

(Default) = "%System%\"

HKLM\SOFTWARE\Classes\TypeLib\

{AF4DA692-E1D6-469A-855B-6445294857D4}\1.0\FLAGS\

(Default) = "0"

HKLM\SOFTWARE\Classes\TypeLib\

{AF4DA692-E1D6-469A-855B-6445294857D4}\1.0\

(Default) = "IEHelper 1.0 Type Library"

HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj\CurVer\

(Default) = "IEHlprObj.IEHlprObj.1"

HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj\

(Default) = "IEHlprObj Class"

HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj.1\CLSID\

(Default) = "{AF4DA69B-E1D6-469A-855B-6445294857D4}"

HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj.1\

(Default) = "IEHlprObj Class"

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\

ahnsoft = "%System%\ahnsbsb.exe

Values modified
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\ Folder\Hidden\SHOWALL\CheckedValue: 0x00000000 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\Hidden: 0x00000002
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\ShowSuperHidden: 0x00000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

NoDriveTypeAutoRun: 0x00000091

=================================================

วิธีกำจัด/แก้ virus : je.exe , ahnsbsb.exe

=================================================

Download : PeeTechFix-Win32/PSW.OnlineGame 2.0.5

----------------------------------------------------------------------