Results 1 to 10 of 51

Thread: another infection

Threaded View

Previous Post Previous Post   Next Post Next Post
  1. #13
    Security Expert: Emeritus
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    29,374

    Default

    Hi

    No.

    Do again a system restore.

    After that, make your hidden and system files visible -> http://www.xtra.co.nz/help/0,,4155-1916458,00.html

    Delete these manually:

    C:\WINDOWS\SYSTEM32\fueknnwm.ini
    C:\WINDOWS\SYSTEM32\hmnxctde.ini
    C:\WINDOWS\SYSTEM32\RCX315.tmp
    C:\WINDOWS\SYSTEM32\bfhgqssn.ini
    C:\WINDOWS\mrofinu572.exe.tmp
    C:\WINDOWS\SYSTEM32\xv2
    C:\WINDOWS\SYSTEM32\edcA01
    C:\WINDOWS\SYSTEM32\ap3
    C:\Temp\Ryuan1
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger .exe
    C:\Program Files\Messenger\msmsgs .exe

    After that:

    First we'll need to backup registry:

    Start -> Run -> regedit -> ok. Then File -> Export. Give it a name and press Save.

    Save text below as fix.reg on Notepad (save it as all files (*.*)) on Desktop

    Windows Registry Editor Version 5.00

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Ktg"=-

    [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ssqomjj]

    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Aida]

    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IST Service]

    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TBPS]

    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinTools]

    It should look like this ->

    Doubleclick fix.reg, press Yes and ok.

    (In case you are unsure how to create a reg file, take a look here with screenshots.)

    Reboot.

    Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.
    1. Close all applications and windows.
    2. Double-click on dss.exe to run it, and follow the prompts.
    3. When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt<-this one will be minimized
    4. Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt and the extra.txt to your post. in your reply
    Last edited by Shaba; 2008-01-23 at 20:00.
    Microsoft MVP Consumer Security 2008-2011

    Member of ASAP and UNITE since 2006

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •