中左conime.exe

國米~魂

中左conime.exe

conime - conime.exe - Process Information
Process File: conime or conime.exe
Process Name: BFGhost 1.0
  
Description:
conime.exe is a process which is registered as the BFGhost 1.0 Remote administration backdoor tool. This backdoor application can allow attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately. Please see additional details regarding this process
For More Detailed Process Information Get WinTasks 5 Pro


Author: na
Part Of: BFGhost 1.0

System Process: No
Background Process: Yes
Uses Network: Yes
Hardware Related: No
Common Errors: N/A
  
Security Risk (0-5): 4
Virus: No
Spyware: No
Trojan: Yes
  


點算ar?

LoserHK

Posted by: greyknight17

Please print out or copy this page to Notepad. You should not have any open browsers when you are following the procedures
below.

Go to My Computer->Tools->Folder Options->View tab and make sure that Show hidden files and folders is enabled. Also make sure
that the System Files and Folders are showing/visible also.

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer. After we are finished with your log file and verified that it's clean, you may turn it back on and create a new restore point.

Reboot into Safe Mode (hit F8 key until menu shows up).

Make sure to close any open browsers. Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click
Kill process for each one if they are still listed (they shouldn't be - but double check it):

C:\WINDOWS\System32\conime.exe

Uninstall the following via the Add/Remove Panel (Start->(Settings)->Control Panel->Add/Remove Programs) if they exist:

GetRight - contains spyware

Check and fix the following in HijackThis if they still exist (make sure not to miss any):

O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm

Delete the following Files/Folders (delete folders if no filename is specified) according to their directory (if none, just do a search for them)
and delete them if they exist:

C:\WINDOWS\System32\conime.exe
C:\Program Files\GetRight\

Reboot into Normal Mode and post a new HijackThis log file so we can make sure it's clean.

To help prevent future spyware installations/infections, please read the anti-spyware section and use the tools provided.

-----------------------------------------------------------------------
http://www.techsupportforum.com/computer/topic/17955-1.html