Pieter_Arntz
November 12th, 2003, 07:14 AM
This hijack is very rapidly becoming popular, so I thought I'd better post some information. As little as I have at the moment, it is enough to remove it.
In HijackThis fix the R0/R1 items pointing to maxxxhosters.com
And find the startup entry looking like:
O4 - HKLM\..\Run: [Ulubione] C:\WINDOWS\system32\sysfxxt.exe
and fix that as well.
The Ulubione is fixed, the filename is sys(+4 random letters).exe
Find and remove that file after reboot.
HTH,
Pieter
In HijackThis fix the R0/R1 items pointing to maxxxhosters.com
And find the startup entry looking like:
O4 - HKLM\..\Run: [Ulubione] C:\WINDOWS\system32\sysfxxt.exe
and fix that as well.
The Ulubione is fixed, the filename is sys(+4 random letters).exe
Find and remove that file after reboot.
HTH,
Pieter