Virus sos?
-
yeps!
-
Download XP Pro Recovery Console setup file from here - http://www.microsoft.com/downloads/details.aspx?FamilyId=535D248D-5E10-49B5-B80C-0A0205368124&displaylang=en
Save it to your desktop and drag it into Combofix.
Follow the instructions...
Remember to disable AntiVir (right click on the umbrella and untick AntiVir Guard enable) before running Combofix.
Upload the Combofix log to Mediafire.
-
ok i go run combo fix liao hab to off this webbie le.
Later~
-
I tink it's dis one ba..
http://www.mediafire.com/?0ojpxt4z4yg
Too many combo fix file le. I tink the latest one is the one in C drive rite?
This is the one i found in C drive. Sollie sollie i didn't take notice of where the latest one is stored.
-
Me thinks virus still around coz my IE keeps hanging. o_0
-
Yeah...
Disable AntiVir temporarily
Right click on the red umbrella and untick AntiVir Guard enable. Remember to re-enable it before posting back the logs.
Disable Teatimer temporarily
- Right click the Spybot Icon in the system tray near the clock (looks like a blue/white calendar with a padlock symbol).
- Click once on Resident Protection, then right click the Spybot icon again and make sure Resident Protection is now Unchecked. The Spybot icon in the System tray should now be now colorless.
- Go to Start > All Programs > Spybot - Search & Destroy > Spybot Search & Destroy.
- Click on Mode > Advanced Mode. When it prompts you, click Yes.
- On the left hand side, click on Tools.
- Check (tick) this box if it is not yet ticked: Resident.
- You will notice that Resident is now added under Tools. Click on Resident.
- Uncheck (untick) this box: Resident "TeaTimer" (Protection of over-all system settings) active.
- Exit Spybot Search & Destroy.
- Restart your computer for the changes to take effect.
Download this file - http://www.mediafire.com/?mr2rxtcid13
Save it as CFScript.txt
Referring to the picture below, drag CFScript into Combofix.
Combofix will start running. When done, a log will be produced. Please post this log in your next reply.In addition, it will prompt you to submit some files for analyzing.
Click OK.
Copy and paste the file path into the text box next to the Browse button (boxed up in red).
Click on Send File.
Do not mouse click on Combofix while it is running. That may cause it to stall.Upload both HijackThis and Combofix logs to Mediafire.
-
Hey i clicked Send File and the window close. Is that supposed to happen?
This is the combofix log:
http://www.mediafire.com/?sml5t8viogy
And this is the HijackThis log:
http://www.mediafire.com/?dmdzjycbyk1
Thanks Mayi for your detailed instructions thus far. Really appreciate it!
-
Originally posted by motoway:
Hey i clicked Send File and the window close. Is that supposed to happen?
Yes.
-
Looks good.
- Please go to Kaspersky website to perform an online scan. Please use Internet Explorer as it uses ActiveX.
- Click on Accept
- It will prompt you to download an ActiveX. Allow it.
- After that, you will be prompted to install it.
- Once installed, it will start downloading the definitions. This will take some time. At the same time, you may also receive another prompt to install another ActiveX. Allow it again and repeat Step 2.
- When the definitions have finished downloading, click Next.
- Click on Scan Settings.
- Under Scan using the following antivirus database:, choose extended - protect your computer from Spyware, adware, dialers and potentially dangerous software such as remote access utilities, prank programs and jokes. We do not recommend this option to beginners or inexperienced users.
- Under Scan options:, check (tick) both boxes.
- Click Ok.
- Under Please select a target to scan:, click on My Computer. It will start scanning. Please be patient.
- Click on Save Report As....
- Give this report a name and change the Save as type: to Text file (*.txt) before clicking on Save.
- Please post this log in your next reply.
-
