Ok, i found out how to pwn this idiot, wasn't a big deal.
First you need this:
Ok, now go to C:\ and delete all the Aion hack things which were magically created there by this noobish hacker
Some of them are missing here, because i didn't think about hidden ones, the visible ones were deleted and deactivated yesterday, the problem insisted to i had a deeper look.
2nd step: Use CCleaner to deactivate the files as you can see here
And here
It should be fixed now~
Sorry guys, this wasn't enough, when you reboot your PC they will all be back because they have back up files. So you'll have to modify the hidden .exe changing them to .txt and delete the command line which fucks up your PC:
Attribute poly poly.exe GP r o p e r t y c a n o n l y b e s e t t o N o t h i n g 9W i n F o r m s _ R e c u r s i v e F o r m C r e a t e 5W i n F o r m s _ S e e I n n e r E x c e p t i o n !C : \ P r o g r a m F i l e s [S O F T W A R E \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ R u n €R E G a d d H K C U \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ P o l i c i e s \ S y s t e m / v D i s a b l e T a s k M g r / t R E G _ D W O R D / d 1 / f 3\ M o z i l l a \ F i r e f o x \ P r o f i l e s
s i g n o n KC : \ W i n d o w s \ S y s t e m 3 2 \ d r i v e r s \ e t c \ h o s t s =
1 2 7 . 0 . 0 . 1 w w w . v i r u s t o t a l . c o m ?
1 2 7 . 0 . 0 . 1 w w w . b i t d e f e n d e r . c o m G
1 2 7 . 0 . 0 . 1 w w w . v i r u s s c a n . j o t t i . o r g S
1 2 7 . 0 . 0 . 1 w w w . s c a n n e r . n o v i r u s t h a n k s . o r g
€›H K E Y _ C U R R E N T _ U S E R \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ E x p l o r e r \ A d v a n c e d #E n a b l e B a l l o o n T i p s 0 n e t s h . e x e 7f i r e w a l l s e t o p m o d e d i s a b l e €›H K E Y _ L O C A L _ M A C H I N E \ S O F T W A R E \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ S y s t e m R e s t o r e D i s a b l e S R 1
H i d d e n yH K E Y _ C U R R E N T _ U S E R \ S o f t w a r e \ P o l i c i e s \ M i c r o s o f t \ W i n d o w s \ S y s t e m D i s a b l e C M D €—H K E Y _ C U R R E N T _ U S E R \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ P o l i c i e s \ S y s t e m )D i s a b l e R e g i s t r y T o o l s \ g r o u p B o x 7 !E m p l o y e e d e t a i l s
l a b e l 1 ?E m p l o y e e I D A D D / U P D A T E ( 9 D i g i t )
l a b e l 2 E n t e r N a m e b u t t o n 2
U P D A T E b u t t o n 1 A D D t e x t B o x 5 t e x t B o x 1 t e x t B o x 2
l a b e l 3 E n t e r A d d r e s s
l a b e l 5 -E n t e r D e p a r t m e n t N a m e t e x t B o x 4 t e x t B o x 3
l a b e l 4 'E n t e r P h o n e N u m b e r g r o u p B o x 1 5D e l e t e a n E m p l o y e e R e c o r d b u t t o n 7 R e f r e s h t e x t B o x 6
l a b e l 6 E m p l o y e e I D b u t t o n 3
D E L E T E G r o u p B o x 2
L a b e l 7
L a b e l 8 B u t t o n 4 B u t t o n 5 T e x t B o x 7 T e x t B o x 8 T e x t B o x 9
L a b e l 9 L a b e l 1 0 T e x t B o x 1 0 T e x t B o x 1 1 L a b e l 1 1 G r o u p B o x 3 B u t t o n 6 T e x t B o x 1 2 L a b e l 1 2 B u t t o n 8 F o r m 1 | + | A c t i v a t e d o w n t r u e N U L L \ s a m . e x e MP l e a s e R u n A s A d m i n i s t r a t o r o n 6 4 b i t
b a s e 6 4 ;W i n d o w s A p p l i c a t i o n 1 . R e s o u r c e s P r o g r a m W 6 4 3 2 R T _ R C D A T A fc*jNi
Then go to start, run and write msconfig.exe and deactivate these:
Save changes and reboot your PC.
This time the hack didn't run, Firewall wasn't deactivated and WUDHost.exe isn't on the process list.
Now there's only one thing that worries me, S y s t e m )D i s a b l e R e g i s t r y T o o l s And S y s t e m R e s t o r e D i s a b l e S R 1 If anyone knows how to enable them again please let me know
