xeciihqo.exe

  • Thread starter Thread starter Mr. Fisher
  • Start date Start date
it'a a process running on my machine located in win32 and I get an error
message occasionally that states that it can't launch.
 
Hi,

It's a trojan (virus). You probably don't want to know what it's been doing.
Follow these "relatively" simple removal steps:

Restart in Safe mode by hitting F8 as Windows first begins to load on boot.
Logon as administrator. As this can be tricky, you will find help in doing
this here:
http://www.rickrogers.org/fixes.htm#Safe mode

Start/search/files and folders, look for <filename> and delete it wherever
it is found (hopefully it is not found if your antivirus software is doing
its job).

Click start/run, type regedit and click ok. Expand the plus (+) signs to
look under these keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg

Look in the right hand pane for the string or strings that load that file.
Delete just those strings that contain the reference. Do not delete other
strings or the keys from the left pane. Close the registry editor when
completed, make sure you check all strings.

Restart the system normally, verify that this programs is neither loaded or
running.

Update your antivirus software, run a full system scan.

Go to the Control Panel/System/System Restore tab. Check the box to "Turn
off system restore on all drives". Click apply/ok. This will remove all
restore points, however you don't want them back as some or all of them will
contain the virus depending upon how recently you got infected.

Restart System Restore.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org
 
Back
Top