re: Evil "lexplore" virus hijacked me
Tuesday, June 8, 2004 at 11:43 pm
Windows 98 Annoyances Discussion Forum
Posted by Ms. Eagle
(33670 messages posted)
Holly, that's why I said to move HijackThis into a "folder", because it creates
backups! Now, they're everywhere. :) Just create a new folder on your desktop and
drag all those backups into it. Cut and Paste HijackThis into the folder, so it doesn't
turn into a shortcut.
Your Autoexec.bat file has a lot of entries in it. Some look strange to me, and it
doesn't need to load at startup. You can uncheck it in MSCONFIG. Go to Start - Run
- type: MSCONFIG hit Enter or OK. Uncheck 'Process Autoexec.bat file' and Config.sys
file, both. Apply. The next time you reboot, the change will be in effect.
In HijackThis, it's up to you, but all those R1 and R0 entries were put there by
Compaq. You can fix them, if you want to, and reset IE's default search settings
by downloading the IEFix.REG file. These R1 and R0 URL's: http://search.presario.net
If so, select all those and these two. Have them fixed. Reboot.
C:\WINDOWS\SYSTEM\HPZSTATX.EXE
O4 - HKLM\..\Run: [MSN Manager] C:\WINDOWS\mscmgr.exe
Delete files in bold:
C:\WINDOWS\mscmgr.exe
This one is installed with HP printers and can be problematic. If you delete it,
it won't load when you use your printer:
C:\WINDOWS\SYSTEM\HPZSTATX.EXE
Download this .reg file to your Desktop. Double-click on it and answer Yes, to merge
into your registry. It will restore all the default Search settings for IE. SpywareInfo-IEFIX.reg
"I'm not on a network anyway (or I'd have had the IT guy in, wouldn't I?!)"
No, many households have "home" networks with two or more PC's on the same connection.
I didn't include RPCSS to be deleted. Although, if you do, that's alright, too. That
was listed at the top under Running Processes.
|
All messages in this thread [show all]
 | | | | | | | | | | | | | | |  | re: Evil "lexplore" virus hijacked me (Ms. Eagle: Tue, Jun 8, 2004, 11:43 pm) |
| |
| |
| |
Return to the Windows 98 Discussion Forum
|
|
