[Excal]

• Open HiJackThis
• Click on the configure button on the bottom right
• Click on the tab "Misc Tools"
• click on "delete an NT service"
• Copy and paste this in: 11Fßä#·ºÄÖ`I
• Click "ok", then reboot

If it says it is still in service, go diasable it, then try it.

Let me know,

Thanks



Excal

[Advertisements]

Excal,

-OK service is disabled.
-HJT is opened and service name is copied to delete an NT service.
-Click OK.
-HJT responds "service 11Fßä#·ºÄÖ`I was not found in the Registry. Make sure you entered the short name of the service., vbExclamation"

HJT is not locating the service when it scans but it is still under services.msc
Path to executeable is C:\WINDOWS\system32\syshc.exe /s

What do we do next?

Joe

[jtoro]

Excal,

-OK service is disabled.
-HJT is opened and service name is copied to delete an NT service.
-Click OK.
-HJT responds "service 11Fßä#·ºÄÖ`I was not found in the Registry. Make sure you entered the short name of the service., vbExclamation"

HJT is not locating the service when it scans but it is still under services.msc
Path to executeable is C:\WINDOWS\system32\syshc.exe /s

What do we do next?

Joe

[Excal]

try puttin this name in their Network Security Service

Let me know



Excal

[jtoro]

Excal,

Nope that didn't work either.

Joe

[Excal]

You may already have this on your system, if you do, you can use the one you have.

Download and unzip HSfix to your desktop :
HSRegFix


Double click on the HSFix and when asked to merge say yes.


Reboot, then tell me if that service is still there.


Thanks,



Excal

[jtoro]

Excal,

Yes used HS Regfix and rebooted. Service still appears under services.msc. Service does not appear under a HJT scan.

I tried "sc delete 11Fßä#·ºÄÖ`I" under a command prompt but it says:

The specified service does not exist as an installed service.

Used sc query state= all to see all of the serivecs but it does not seem to appear there.

Thoughts?

Joe

[Excal]

Joe,

( 11Fßä#·ºÄÖ`I) Notice that there is a space between the parentsesis and the beggining number 1. tryi putitng it in that way, minus the parentesis but still with the space.

This isn't a major deal at all. The service is stopped and the entry is gone out of HiJackThis, those are a 2 major concerns. This is more cosmetic then anything.

Thanks,


Excal

[jtoro]

Excal,

That was exactly it! I feel silly that I didn't catch that.

Could you please let me know how much time you spent on the problem so I can make an appropriate donation?

Thank you very much. The machine seems to back to normal.

All the best,
Joe

[Excal]

I have no clue....lol

Great job, it appears your computer is clean

Ensure you rehide your “hidden files and folders” back to the way they were.

Now that your system is Malware Free, it is important to reset your system Restore. Click Here to learn how to.

Might I suggest the following Free Spyware programs, if you don't already have them, for added security, you can download them at the following links. These programs work great for detection:

Ad-aware SE
Spybot S&D
Microsoft Anti-Spyware


If you are unhappy with your current antivirus and want to replace it or if you dont already have one, I suggest one of these free programs:
*Note - do not use more than one anti-virus program as it will more than likely cause conflict.

AVG
Avast
AntiVir


The following free programs are great for prevention:

SpywareBlaster 3.4
Spywareguard
IE/Spyad

A Firewall is a must! Here are 3 good free versions:
(do not have more than one firewall running on your system)

Sygate
Kerio
ZoneLabs

There are other options other than Internet Explorer for a browser, which some say have better security. Two of them are:

Firefox
Opera

If you decide to keep Internet Explorer, This site is a great source for tightening up security on It's settings.

Make sure that you keep your Operating System and IE updated with the latest Critical Security Updates from Microsoft...they usually come out once a month, on the 2nd Tuesday of each month.

Be sure and give the Temp folders a cleaning out now and then as well, Make sure after you clean your Temp files to empty out your Recycle bin as well.
For ease use the following program:

Cleanup
Run "Cleanup" and when it has finished, Reboot

To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial and use the tools provided. Also read How I got Infected

[Excal]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.