Ok, i found out how to pwn this idiot, wasn't a big deal.
First you need this:
[Only registered and activated users can see links. Click Here To Register...]
Ok, now go to C:\ and delete all the Aion hack things which were magically created there by this noobish hacker
[Only registered and activated users can see links. Click Here To Register...]
Some of them are missing here, because i didn't think about hidden ones, the visible ones were deleted and deactivated yesterday, the problem insisted to i had a deeper look.
2nd step: Use CCleaner to deactivate the files as you can see here
[Only registered and activated users can see links. Click Here To Register...]
And here
[Only registered and activated users can see links. Click Here To Register...]
It should be fixed now~
Sorry guys, this wasn't enough, when you reboot your PC they will all be back because they have back up files. So you'll have to modify the hidden .exe changing them to .txt and delete the command line which fucks up your PC:
Attribute poly poly.exe GP r o p e r t y c a n o n l y b e s e t t o N o t h i n g 9W i n F o r m s _ R e c u r s i v e F o r m C r e a t e 5W i n F o r m s _ S e e I n n e r E x c e p t i o n !C : \ P r o g r a m F i l e s [S O F T W A R E \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ R u n €ÛR E G a d d H K C U \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ P o l i c i e s \ S y s t e m / v D i s a b l e T a s k M g r / t R E G _ D W O R D / d 1 / f 3\ M o z i l l a \ F i r e f o x \ P r o f i l e s
s i g n o n KC : \ W i n d o w s \ S y s t e m 3 2 \ d r i v e r s \ e t c \ h o s t s =
1 2 7 . 0 . 0 . 1 w w w . v i r u s t o t a l . c o m ?
1 2 7 . 0 . 0 . 1 w w w . b i t d e f e n d e r . c o m G
1 2 7 . 0 . 0 . 1 w w w . v i r u s s c a n . j o t t i . o r g S
1 2 7 . 0 . 0 . 1 w w w . s c a n n e r . n o v i r u s t h a n k s . o r g
€›H K E Y _ C U R R E N T _ U S E R \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ E x p l o r e r \ A d v a n c e d #E n a b l e B a l l o o n T i p s 0 n e t s h . e x e 7f i r e w a l l s e t o p m o d e d i s a b l e €›H K E Y _ L O C A L _ M A C H I N E \ S O F T W A R E \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ S y s t e m R e s t o r e D i s a b l e S R 1
H i d d e n yH K E Y _ C U R R E N T _ U S E R \ S o f t w a r e \ P o l i c i e s \ M i c r o s o f t \ W i n d o w s \ S y s t e m D i s a b l e C M D €—H K E Y _ C U R R E N T _ U S E R \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ P o l i c i e s \ S y s t e m )D i s a b l e R e g i s t r y T o o l s \ g r o u p B o x 7 !E m p l o y e e d e t a i l s
l a b e l 1 ?E m p l o y e e I D A D D / U P D A T E ( 9 D i g i t )
l a b e l 2 E n t e r N a m e b u t t o n 2
U P D A T E b u t t o n 1 A D D t e x t B o x 5 t e x t B o x 1 t e x t B o x 2
l a b e l 3 E n t e r A d d r e s s
l a b e l 5 -E n t e r D e p a r t m e n t N a m e t e x t B o x 4 t e x t B o x 3
l a b e l 4 'E n t e r P h o n e N u m b e r g r o u p B o x 1 5D e l e t e a n E m p l o y e e R e c o r d b u t t o n 7 R e f r e s h t e x t B o x 6
l a b e l 6 E m p l o y e e I D b u t t o n 3
D E L E T E G r o u p B o x 2
L a b e l 7
L a b e l 8 B u t t o n 4 B u t t o n 5 T e x t B o x 7 T e x t B o x 8 T e x t B o x 9
L a b e l 9 L a b e l 1 0 T e x t B o x 1 0 T e x t B o x 1 1 L a b e l 1 1 G r o u p B o x 3 B u t t o n 6 T e x t B o x 1 2 L a b e l 1 2 B u t t o n 8 F o r m 1 | + | A c t i v a t e d o w n t r u e N U L L \ s a m . e x e MP l e a s e R u n A s A d m i n i s t r a t o r o n 6 4 b i t
b a s e 6 4 ;W i n d o w s A p p l i c a t i o n 1 . R e s o u r c e s P r o g r a m W 6 4 3 2 R T _ R C D A T A fc´*ãjN�©ÞÞºi
Then go to start, run and write msconfig.exe and deactivate these:
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
Save changes and reboot your PC.
This time the hack didn't run, Firewall wasn't deactivated and WUDHost.exe isn't on the process list.
Now there's only one thing that worries me, S y s t e m )D i s a b l e R e g i s t r y T o o l s And S y s t e m R e s t o r e D i s a b l e S R 1 If anyone knows how to enable them again please let me know :)