maxxxhosters hijack

Discussion in 'spyware news and general information' started by Pieter_Arntz, Nov 12, 2003.

Thread Status:
Not open for further replies.
  1. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    This hijack is very rapidly becoming popular, so I thought I'd better post some information. As little as I have at the moment, it is enough to remove it.

    In HijackThis fix the R0/R1 items pointing to maxxxhosters.com
    And find the startup entry looking like:
    O4 - HKLM\..\Run: [Ulubione] C:\WINDOWS\system32\sysfxxt.exe
    and fix that as well.
    The Ulubione is fixed, the filename is sys(+4 random letters).exe
    Find and remove that file after reboot.

    HTH,

    Pieter
     
    Pieter_Arntz, Nov 12, 2003
    #1
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...