maxxxhosters hijack

Discussion in 'news, general information and FAQs' started by Pieter_Arntz, Nov 12, 2003.

Thread Status:
Not open for further replies.
  1. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,332
    Location:
    Netherlands
    This hijack is very rapidly becoming popular, so I thought I'd better post some information. As little as I have at the moment, it is enough to remove it.

    In HijackThis fix the R0/R1 items pointing to maxxxhosters.com
    And find the startup entry looking like:
    O4 - HKLM\..\Run: [Ulubione] C:\WINDOWS\system32\sysfxxt.exe
    and fix that as well.
    The Ulubione is fixed, the filename is sys(+4 random letters).exe
    Find and remove that file after reboot.

    HTH,

    Pieter
     
Thread Status:
Not open for further replies.