Yahoo scumware?

Hi,

Cleaning up my friend's son's harddrive. Win98 se. Found a (suspect) program in msconfig > startup and unchecked it. After reboot another sus program was running, unchecked that. After reboot original program was running again...???
Ran the program names, jhnh4p.exe and mjnl.exe ( mjni.exe ) on a Google search. No results. Ran a search on Yahoo search engine and got no results, BUT, a download dialogue box came up for each one...huh? The download is from http://au.adserver.yahoo.com.
I decided to uninstall all Yahoo programs from the machine. That should do it.

On reboot programs are back. OooooKkkkk...time for Hijack This. Remove one, rerun HT, the other is there, rerun HT, the first one is back.

Got rid of them by going to Safe Mode and running Hijack This there.

What do you think of this type of subterfuge?

Is it worth emailing Yahoo? I think that if I uninstall a program, I would like it to take all it's garbage with it.

Your thoughts?

Matt

 

I don't think those were from Yahoo, or had anything to do with the program. More likely someone/something using Yahoo as the means of transfer. I would suggest some online scans. Housecall and RAV, maybe even some dedicated trojan scans. Did you clean out the Downloaded Program Files folder? Good chance of a nasty ActiveX control allowing autodownload. Check the ActiveX settings too.

 

Hi Dave,

Will check those out. Much appreciated.

Matt