Thread: Infected
View Single Post
  #9 (permalink)  
Old 26-05-2005, 09:00 PM
HJThis's Avatar
HJThis HJThis is offline
Senior Member
Loyal Contributor
 
Join Date: Aug 2004
Posts: 2,233
HJThis Helps others at D-A-LHJThis Helps others at D-A-L
Send a message via MSN to HJThis
Smile Re: Infected

Hi,Tib

Great now that you have Alt+ctrl+del do this here

Press control-alt-delete to get into the task manager and end the follow processes if they exist:
setup32.exe
systeminfos.exe
mousehs.exe
mssmmspgr.exe



If you get an error when deleting a file. Right click on the file and check to see if the read only attribute is checked. if it is uncheck it and try again.

Then again use KillBox

Download Pocket Killbox version 2.0.0.175
From one of these loactions
http://www.downloads.subratam.org/KillBox.zip
http://www.atribune.org/downloads/KillBox.exe
If you already have Killbox first ensure it is this version !.
If you have the one in zipped form it MUST be unzipped/extracted first.

Start Killbox place a tick next to [x]delete on reboot.
Copy this whole list into the windows clipboard, all the Bolded below.

D:\WINDOWS\System32\setup32.exe
D:\WINDOWS\System32\systeminfos.exe
D:\WINDOWS\System32\mousehs.exe
mssmmspgr.exe
<--Do a file Search for this one & add it to KillBox like
the others

Back in Killbox go > file > paste from clipboard,
Click the red highlighted X button and say yes to the first prompt and no to the second.

Exit Killbox and immediately restart your PC.

Once back at the forums make and post a hijackthis and findits logs, there will be more to do hang in there.

HGD

Last edited by HJThis; 26-05-2005 at 09:11 PM.
Reply With Quote