Dave5N
Über Member
- Location
- Outside The Little Nibble
I have a swp2009 infection. Tried google but the sites listed say to delete files that aren't there. What do I do?
Help
- Thread starter Dave5N
- Start date
Page may contain affiliate links. Please see terms for details.
Oh dear.... I had a PC with this one a few days ago...
Its a B@stard. Wouldnt let me run Task Manager or CMD
What I did was goto a remote computer, then run a tasklist on the infected machine. endtask the nasty then I was able to go back to the computer to rectify everything that it had done. I noticed these :
Created startup entry.
Created scheduled task
Created Regkey for run at boot
Created Regkey for run at login
localhost was set as a proxy
The process I had to kill was : ljrrsysguard.exe
I have a feeling part of it is ramdomly generated.
Its a B@stard. Wouldnt let me run Task Manager or CMD
What I did was goto a remote computer, then run a tasklist on the infected machine. endtask the nasty then I was able to go back to the computer to rectify everything that it had done. I noticed these :
Created startup entry.
Created scheduled task
Created Regkey for run at boot
Created Regkey for run at login
localhost was set as a proxy
The process I had to kill was : ljrrsysguard.exe
I have a feeling part of it is ramdomly generated.
OP
OP
Dave5N
Über Member
- Location
- Outside The Little Nibble
All sorted.
Ianrauk, many thanks. Excellent service from that forum and I will be contributing towards their expenses.
Ianrauk, many thanks. Excellent service from that forum and I will be contributing towards their expenses.
2Loose
Guru
- Location
- Loughborough, Leicestershire.
+1 fan of HijackThis!
