Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Fake MS Removal Tool - Can't Run Most Programs


  • Please log in to reply

#1
Canadian_KO

Canadian_KO

    New Member

  • Member
  • Pip
  • 1 posts
Hello, I followed the thread here.

The program won't let me run anything else such as task manager or many things dealing with anti-virus removal.

Here is the information from RK:
RogueKiller V4.3.4 by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Louise [Admin rights]
Mode: Scan -- Date : 03/26/2011 10:24:05

Bad processes: 1
[APPDT/TMP/DESKTOP] mMhNfEhIoLc05200.exe -- c:\documents and settings\all users.windows\application data\mmhnfehiolc05200\mmhnfehiolc05200.exe -> KILLED

Registry Entries: 4
[APPDT/TMP/DESKTOP] HKCU\[...]\RunOnce : mMhNfEhIoLc05200 (C:\Documents and Settings\All Users.WINDOWS\Application Data\mMhNfEhIoLc05200\mMhNfEhIoLc05200.exe) -> FOUND
[APPDT/TMP/DESKTOP] HKUS\S-1-5-21-854245398-436374069-725345543-1004[...]\RunOnce : mMhNfEhIoLc05200 (C:\Documents and Settings\All Users.WINDOWS\Application Data\mMhNfEhIoLc05200\mMhNfEhIoLc05200.exe) -> FOUND
[DNS] HKLM\[...]\ControlSet001\Parameters\Interfaces\{CE6B37B0-ADDA-4AFA-99BC-22F0009035B2} : NameServer (216.8.137.203 216.8.137.204) -> FOUND
[DNS] HKLM\[...]\ControlSet002\Parameters\Interfaces\{CE6B37B0-ADDA-4AFA-99BC-22F0009035B2} : NameServer (216.8.137.203 216.8.137.204) -> FOUND

HOSTS File:
127.0.0.1       localhost


Finished : << RKreport[1].txt >>
RKreport[1].txt

I'll edit in more in intervals. This is because it also randomly shuts the computer down.

Edited by Canadian_KO, 26 March 2011 - 08:30 AM.

  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP