Hupignon

[andergor]

Hi,

Spybot has found something called Hupignon that I am unable to remove.
It says that everything has been fixed but next time I run spybot its there again.
Its seems thats related to different services everytime I run spybot.
I have tried to start my XP in safe mode and delete it but its still there.
Services that are using is
Wmiapsrv
uMWdf
TlntSvr
RDSessMgr
MSDTC
ImapiService

Do anyone has an idea how to remove it

Best Regards
Andergor

[md usa spybot fan]

Consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum on this site. Helpers there assist people with removing malware

To post in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum, follow the instructions here:
"BEFORE you POST" -Preliminary Steps
http://forums.spybot.info/showthread.php?t=288
After completing those steps, start a new thread (topic) in the following forum (making sure to include the HijackThis log and online scan logs produced from the instructions above):
Malware Removal
http://forums.spybot.info/forumdisplay.php?f=22

[jammin]

hey andergor,

i ve got the same problem at the moment and i dont know what to do next. S&D found, i think, 30 times the f***ing HUPIGNON and there are always the same 5-6 services where it was found.

Do u find a solution? - I tried several online scans, stinger, MS-tool against malware, SuperAdBlocker and its only S&D who finds that one every time.


Thanks for answering.
jammin

[Zenobia]

You could try following the advice md usa spybot fan posted above,if you feel you are infected.

[jseph1234]

Hi Guys,

I had the same problem with this Hupignon and I finally was able to get rid of it.

At First I, just used the "fix the problem" ONE TIME only and then went my merry way and the same issue would come back at reboot.

What I had to do is this:

I took note of the The box that initially popped up when I starting running the scan ie, "The following service is considered malicous was stopped...."
I wrote the down the Service that was discontinued and found a way to permanently stop it. In My case the first 0ne to be stop by Spybot was
Distribution Transaction Coordinator and checked to be registry key was gone.

1. I Ran the Scan and when HUPIGNON popped up I stop the scan and f"ixed the problem".

2. I Ran another scan IMMEDIATELY and I found out NetMeeting Remote Desk Sharing was Stopped by SPYBOT. I went into Accesories and deleted Net Meeting. and continued my scan and "fixed the problem" with Hupignon.

3. I Ran another scan IMMEDIATELY and found out Indexing Service had been stopped by SPYBOT and I went to Windows Components and unchecked the Indexing Service and continued to run the scan and "fixed the problem" with Hupignon.

4. I rebooted the system and ran my scan again and another Service was stopped by SPYBOT and I continued my scan and "fixed the problem" with Hupignon.

5. I ran another scan IMMEDIATELY and Hupignon was gone.

6. I rebooted again and ran a scan and the Hupignon was still gone.

The point is that SPYBOT identifies the Service that Hupignon is using and stops it and deletes the registry key but if you dont stop those services in a more permanent manner, ie delete "Net Meeting" or unchecking "
Index Service" Hupignon will continue to use those areas to reside.

If anybody has any questions respond here and I'm with you.