lock1.exe / xy ms-dos batch file (virus/worm?)

[MSU ROX]

I am having the exact same problem.... to the tee. Source: C:\msdirectx.sys

also the stupid xy.bat file appears everytime i reboot

 

[RealBlackStuff]

MSU ROX

put HijackThis in e.g C:\Program Files\HJT and NOT on the Desktop!

follow this: https://www.techspot.com/vb/topic33967.html
Fix these while you are at it:
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O4 - HKLM\..\Run: [strtas] lockx.exe
O4 - HKLM\..\RunServices: [strtas] lockx.exe
O4 - HKCU\..\Run: [strtas] lockx.exe
O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
fix all O16 - DPF: entries
You know these IPs? If not, FIX.
O17 - HKLM\System\CCS\Services\Tcpip\..\{75319614-B5FE-49F6-B66A-7A0E50C27330}: NameServer = 68.60.32.6,68.60.32.5

Then show me that xy.bat

 

[MSU ROX]

My bad....

 

[MSU ROX]

how do i show you the xy.bat file??

 

[RealBlackStuff]

rightclick it, select Edit, then copy & paste it in here.

read the other posts about how to solve the lockx stuff.

Then follow these instructions EXACTLY
How to remove Begin2Search/Coolwebsearch and Other Nasties

Then see Read: How to post your Hijackthis log-files as an attachment.

And don't bother to come back until you have at least SP1 (or rather SP2) installed.