how do i delete clickme/clickme.exe

[mcbobbyw2]

been having problems with my pc for a while,
i know as much as much about giving birth (im male by the way)
as i do about computers,absolutely nought,zero.
everytime i go on my pc i get a macafee alert saying a clickme/clickme.exe file has suspicious scripting and do i want to blah,blah.
of course i stop the file as i know it has something to do with premium dialing and pornographic sites,
i asked my colleague who deals with porn scum,not much of a tech though(old bill --you see).we aint machines
well if you have nothing against us,was wondering if anyone could tell me how i can get rid of this permanantly like.
my 10 yr old sometimes thinks he knows best and will probably let the damn thing run.
pleasssssse helpppppppppp meeeeeeeeee
thank you
mcw2

[JohnnyReb51]

Hi mcbobbyw2.

Welcome to The Scream! :)

It may be better to post back a HiJackThis log, which will give us more info on what is happening.

Save this Zip file to your Desktop for ease, extract the Zip file to its own folder and run the HiJackThis.exe inside the folder, choose the Scan and Save Log option, wait till the program has finished scanning completely, then post back the log here it created for viewing.


http://www.merijn.org/files/hijackthis.zip


From a quick search, there seems to be 2 versions of this Clickme.exe, one is a Joke program and the other may be an E-mail worm.

Logfile of HijackThis v1.99.1
Scan saved at 10:20:58 AM, on 12/29/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\OSK.exe
C:\WINDOWS\system32\MSSWCHX.EXE
C:\WINDOWS\system32\reg.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\WINDOWS\system32\reg.exe
C:\WINDOWS\system32\reg.exe
C:\WINDOWS\system32\reg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Registry Easy\RegistryEasy.exe
C:\Documents and Settings\Daya\Desktop\hijackthis\HijackThis.exe

O4 - HKLM\..\Run: [RegistryEasy.exe] C:\Program Files\Registry Easy\RegistryEasy.exe
O4 - HKCU\..\Run: [AutorunApp] C:\WINDOWS\system32\Rundll.exe /f
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{CDBDEC5C-0382-4559-A984-0501254961CC}: NameServer = 218.248.240.23 218.248.240.135
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe

been having problems with my pc for a while,
i know as much as much about giving birth (im male by the way)
as i do about computers,absolutely nought,zero.
everytime i go on my pc i get a macafee alert saying a clickme/clickme.exe file has suspicious scripting and do i want to blah,blah.
of course i stop the file as i know it has something to do with premium dialing and pornographic sites,
i asked my colleague who deals with porn scum,not much of a tech though(old bill --you see).we aint machines
well if you have nothing against us,was wondering if anyone could tell me how i can get rid of this permanantly like.
my 10 yr old sometimes thinks he knows best and will probably let the damn thing run.
pleasssssse helpppppppppp meeeeeeeeee
thank you
mcw2

Originally Posted by mcbobbyw2

bnbn