View Single Post
Join Date: Oct 2006
Posts: 33
Reputation: rpggamergirl is an unknown quantity at this point 
Solved Threads: 1
rpggamergirl rpggamergirl is offline Offline
Light Poster

Re: Help! Viruses causing many problems on my computer!

 
0
  #2
May 12th, 2008
Hi,

Please run Hijackthis and put a check next to these entries, close all other windows except Hijackthis and click "Fix Checked" button.
O1 - Hosts: 124.238.254.113 www.10280011.com
O1 - Hosts: 124.238.254.113 10280011.com
O1 - Hosts: 124.238.254.113 www.10289900.com
O1 - Hosts: 124.238.254.113 10289900.com
O1 - Hosts: 124.238.254.113 www.78877788.com
O1 - Hosts: 124.238.254.113 78877788.com
O1 - Hosts: 124.238.254.113 www.11051122.com
O1 - Hosts: 124.238.254.113 11051122.com
O1 - Hosts: 124.238.254.113 1.ehai01.com
O1 - Hosts: 124.238.254.113 da.ehai01.com
O1 - Hosts: 124.238.254.113 ehai01.com
O1 - Hosts: 124.238.254.113 2008.sekart.cn
O1 - Hosts: 124.238.254.113 www.sekart.cn
O1 - Hosts: 124.238.254.113 sekart.cn
O1 - Hosts: 124.238.254.113 www.11309988.com
O1 - Hosts: 124.238.254.113 www.12100088.com
O1 - Hosts: 124.238.254.113 www.12108899.com
O1 - Hosts: 124.238.254.113 d2.llsging.com
O1 - Hosts: 124.238.254.113 llsging.com
O1 - Hosts: 124.238.254.113 dd.749571.com
O1 - Hosts: 124.238.254.113 749571.com
O1 - Hosts: 124.238.254.113 pr.749571.com
O1 - Hosts: 124.238.254.113 txwm1204.com
O1 - Hosts: 124.238.254.113 www.txwm1204.com
O4 - HKLM\..\Run: [LCIDConfig] C:\WINDOWS\lcidchng.exe
O4 - HKLM\..\Run: [HB Kernel] RUNDLL32.EXE C:\WINDOWS\system32\HBKrnl.dll,DllRegisterServer
O4 - HKLM\..\Run: [fiosectc] C:\WINDOWS\fiosectc.exe
O4 - HKLM\..\Run: [lmuspnch] C:\WINDOWS\msnhgcgh.exe
O4 - HKLM\..\Run: [dionpis] C:\WINDOWS\dionpis.exe
O4 - HKLM\..\Run: [fmsbbqi] C:\WINDOWS\fmsbbqi.exe
O4 - HKLM\..\Run: [WINSvr64] C:\WINDOWS\WINSvr64.exe
O4 - HKLM\..\Run: [ptshell] C:\WINDOWS\ptshell.exe
O4 - HKLM\..\Policies\Explorer\Run: [MSDCG32 ] LYLeador.exe
O23 - Service: IE Security Service (msyaxk) - Unknown owner - C:\WINDOWS\system32\msxeg.exe


Download Pocket Killbox.
http://www.atribune.org/downloads/KillBox.exe
*Select the "Delete on Reboot" option.
*Select "All Files"
*Copy the file names below to the clipboard by highlighting them and pressing Control-C:

C:\WINDOWS\lcidchng.exe
C:\WINDOWS\system32\msxeg.exe
C:\WINDOWS\fiosectc.exe
C:\WINDOWS\msnhgcgh.exe
C:\WINDOWS\dionpis.exe
C:\WINDOWS\fmsbbqi.exe
C:\WINDOWS\system32\msxeg.exe
C:\WINDOWS\WINSvr64.exe
C:\WINDOWS\ptshell.exe


*Return to Killbox, go to the File menu, and choose "Paste from Clipboard".
*Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "No" at the Pending Operations prompt.
*If the computer doesn't restart, just restart manually.


Also run SUPERAntispyware:
http://www.superantispyware.com/
http://www.superantispyware.com/down...NTISPYWAREFREE
Load Superantispyware and click the "check for updates" button.
Once the update is finished, close SuperAntispyware again, and boot to Safe Mode to scan your pc.


* In Safe Mode, Start Superantispyware.
Click the "scan your computer" button.
Check "Perform Complete Scan" and then next.
Superantispyware will now scan your computer and when its finished it will list all the infections it has found.
Make sure that they all have a check next to them and press next.
Click finish and you will be taken back to the main interface.
Click "Preferences" and then click the "statistics/logs" tab. Click the dated log and press view log and a text file will appear.

Please post back a fresh hijackthis log for review.
Last edited by rpggamergirl; May 12th, 2008 at 10:21 am.
Reply With Quote