I’ve been having a problem the last 2 days with this annoying pop up message generated by files that have appeared at C:\WINDOWS\SYSTEM\BIN\djrunner.exe No matter what I do, delete them etc, the error message pops back up
“Windows cannot find “C:\WINDOWS\SYSTEM\BIN\djrunner.exe.” Make sure you typed the name correctly, and then try again. To search for click this file, click on the Start button, and then click Search.”
I have found a few other people with the problem on another tech forum but noone has fixed it yet, I’m not sure if this is a virus or what, but the file/s are related to cracking software by someone by the name of John the Ripper, a notorious password cracker ???
If anybody knows anything about this, or knows a fix/cure, please let me know, it will be greatly appreciated.
Hello, I work for a major financial institution and djrunner2.exe was brought to our attention.
This is a key logger program that is capturing you browse activity to most financial related sites. You may want to research further to see if you can find the location in which this file was downloaded from. Most likely the current site is one hosted by Managed.com in Fremont Ca. This site is completely ALARMING. I don’t want to disclose the ip of the server due to the fact that the perp did not put security on the compromised server and there are TONS of files there for several major financial institutions. It captures the url, your id, your password and any other clear text entry associated with the post activity.
You should probably consider any inet banking, eCommerce sites you use to perform financial transactions compromised.
I have no word on the remedial actions associated with identification, removal or remedial actions.
Just out of curiosity, are any of you running personal firewalls?
Hi guys, thanks for all your help & advice, I have pretty much already tried the ideas given here, I have found some other people with the same problem on another tech site, but that site has been down since yesterday, so I’ve not been able to get back to them to see if they have any updates!
Just for the record I run kerio personal firewall, & use Avast Home Edition virus scanner, yet this problem still got me! >:(
The virus or whatever it is was created by someone called Jogn the Ripper, this I found out on the other tech site, but am finding very little info about it all, even google searches come up blank! So at this time I’m at a loss as what to do next!
I was able (it appears) to disinfect a home system (sitting behind a firewall) from djrunner2 by deleting the /bin directory that it was in and deleting a rtdx11??.dat file, an exe beginning with cdg… and all relevant registry entries.
Hi Jason,
then please list the respective results/reports, or problems you encountered while following the advice
do you even find the file on your PC somewhere ?
set Explorer → view/Extras → folder options to show all files/folders, including hidden & system ; also let it show all extensions
then do a complete search of your PC for
DJRUNNER
if found, scan it with KAV below
also search the registy for DJRUNNER and list the found key/entries here