Forum Home
Press F1
 
Thread ID: 46942 2004-07-10 07:44:00 piikikoi.exe ?? rhawkins (5864) Press F1
Post ID Timestamp Content User
251345 2004-07-10 07:44:00 Whenever I go to turn my computer off (windows XP) I am told that piikikoi.exe doesn't want to shut down, but I can't find out what this little beast is, or whether it matters. Properties tells me it was created about 2 weeks ago, but it doesnt seem to be spyware/infectious after scanning with spybot/adaware/nod32.
I'm sure some clever person knows just what it is and whether I should be bothered
rhawkins (5864)
251346 2004-07-10 07:53:00 Hi and Welcome to PressF1 :)

Are you sure that is the correct spelling of piikikoi? In what directory does this file live?
Jen C (20)
251347 2004-07-10 08:07:00 Google knows all ;) Megaman (344)
251348 2004-07-10 08:10:00 > Google knows all ;)

Really? Google had no hits for me? What did google find for you?
Jen C (20)
251349 2004-07-10 08:21:00 > > Google knows all ;)
>
> Really? Google had no hits for me? What did google
> find for you?

Memo to self: Try things before posting about them on pressf1 :8}
Megaman (344)
251350 2004-07-11 02:54:00 I've checked the spelling which is correct and it was in system32. It was a small beast, about 32KB, and doesn't seem to be affecting the functioning otherwise. There was also an associated PFF file of the same name. rhawkins (5864)
251351 2004-07-11 03:07:00 is there any entry in startup for it ??
if you right click/properties does it give any details about it at all?

i would suspect a virus/trojen or malware but it could still be legit. is your antivirus uptodate?
tweak'e (174)
251352 2004-07-11 03:35:00 If the pff files are associated with it the the explaination could be
Here (filext.com)
hth
johnboy (217)
251353 2004-07-11 09:13:00 sorry about earlier vagueness and slight inaccuracy. 2 files labelled piikikoi:- 1) is a PF File labelled piikikoi.exe-OB 9419AB .pf and is 8KB in windows/ prefetch
2) is an application, size 45 KB, in windows/system32
NOD 32 was recently updated. We've also searched symantecs site for this name
Thanks for the interest.
rhawkins (5864)
251354 2004-07-11 10:41:00 There is a high probability its trojan in origin, of the "morphing" type that creates random character file names to avoid detection.

The .pf file is a red herring, its created by Windows as a prefetch to speed up the running of an .exe file.

Try running CWShredder before then, to see if that cures it?

Try renaming the .exe file to .old if it doesn't
Just agree to any warnings.

Don't be suprised if another totally random named .exe file appears however. Post back with the results.
godfather (25)
1 2