#16
Senior Member
Profile: Join Date: Oct 2002
Location: Florida
Posts: 128
Computer Experience:
spybot will not run
I instaled sypbot but after instal the program is like other will not run?
#17
Senior Member
Profile: Join Date: Oct 2002
Location: Florida
Posts: 128
Computer Experience:
spybot will not run
I instaled sypbot ok but now it is like the other program it will not run?
#18
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
Hi
#19
Senior Member
Profile: Join Date: Oct 2002
Location: Florida
Posts: 128
Computer Experience:
found a way to run combofix
i found a way to run combofix and this is the logWARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! 0 .949\686\tabdec.dll0 .949\686\tabdec.dll0 .949\686\tabdec.dllTCP "= 3389:TCP :@xpsp2res.dll,-22009TCP "= 3724:TCP :Blizzard Downloader: 3724http://www.yahoo.com/ext/search/search.html http://favorites.live.com/quickadd.aspx http://www.gmer.net Ad -Aware 2007\aawservice.exe
Last edited by johngkerr; 14th November 2008 at 03:45 .
#20
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
Hi
Quote:
should i disable McAfee and run combofix again
Yes.
#21
Senior Member
Profile: Join Date: Oct 2002
Location: Florida
Posts: 128
Computer Experience:
McAfree disable
When I right click on McAfree icon it dose not have exit in the window.
Last edited by johngkerr; 14th November 2008 at 14:40 .
Reason: spelling
#22
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
Hi
#23
Senior Member
Profile: Join Date: Oct 2002
Location: Florida
Posts: 128
Computer Experience:
combofix log
what is RECOVERY CONSOLE?WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! 0 .949\686\tabdec.dll0 .949\686\tabdec.dll0 .949\686\tabdec.dllTCP "= 3389:TCP :@xpsp2res.dll,-22009TCP "= 3724:TCP :Blizzard Downloader: 3724http://www.yahoo.com/ext/search/search.html http://favorites.live.com/quickadd.aspx http://www.gmer.net
#24
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
Hicontents of the code box below and paste it into a blank Notepad , then save it to your desktop as;CFScript.txt All Files (*.*) Close all other windows and programs . Now drag the CFScript.txt onto ComboFix.exe and drop it, using the left mouse button.Click here to see how to use CFScript.txtPlease do not click on the ComboFix window while it is running a scan. This can cause it to stall.
Code:
File::
c:\windows\system32\TDSSxfum.dll
c:\windows\system32\TDSSoiqt.dll
c:\windows\system32\TDSSlxwp.dll
c:\windows\system32\TDSSlrvd.dat
Folder::
c:\program files\AntiMalwarePro
c:\program files\fhuuifg Thanks
#25
Senior Member
Profile: Join Date: Oct 2002
Location: Florida
Posts: 128
Computer Experience:
combofix log
I downloaded RegCure is it a good program and should i run it?WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! 0 .949\686\tabdec.dll0 .949\686\tabdec.dll0 .949\686\tabdec.dllTCP "= 3389:TCP :@xpsp2res.dll,-22009TCP "= 3724:TCP :Blizzard Downloader: 3724http://www.gmer.net
#26
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
Hi
Quote:
I downloaded RegCure is it a good program and should i run it?
Please do not do so until you are clean. and then I don't recommend registry cleaners, I've seen them do harm to a system.Derfisch Aumha ERUNT.Setup.exe to install ERUNT and backup your registry.Create an ERUNT entry to the Start up folder select No. C:\windows\erunt\ (current date) Yes OK please do the following. ATF Cleaner by Atribune and save it to your Desktop.Windows Temp Now a on line scan. Kaspersky WebScanner disable real time protection applications as they sometimes interfere with the scan. this link for any applicable programs you may have.Click on “Accept” If your pop –up blocker blocks any windows from opening. Click Run on the window that opens .Windows Vista users you must open the web browser using the Run as Administrator command.The program will launch and then begin downloading the latest definition files:
Under Scan on the left side.Click on My Computer
This will start the program and scan your system.
Click the “Scan Report” On the left side.
The scan will take a while so be patient and let it run.
Once the scan is complete it will display if your system has been infected. Click the Save Report As button, and in the Browse dialog box, type a name for the scan report file that you want to create and select its type Text file . Click OK to save the file.:
Save the text file to your desktop.
Copy and paste that information in your next post.
#27
Senior Member
Profile: Join Date: Oct 2002
Location: Florida
Posts: 128
Computer Experience:
scan report
when should I install it RECOVERY CONSOLE
#28
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
HiJavaRa and save the file to your desktop.Right click and Extract All
Once extracted, open and run JavaRa.exe
Click Search For Updates
Select Update Using jucheck.exe
Click Search
If a newer version is found, allow it to be installed
Uncheck the Google Toolbar option. (if you don't want the Google tool bar)
When complete, click Remove Older Versions in the JavaRa interface and allow it to proceed
When that is complete, click Additional Tasks , then select Remove Useless JRE Files and click Go
Exit the tool when complete.
ComboFix /u then hit Enter to uninstall ComboFix and remove the files/folders it created. This action will also reset the System Restore points, removing any infected files there as well.C:\Qoobox and C:\ComboFix folders were removed, as well as the C:\ComboFix.txt file.RSIT.exe and this folder C:\rsit
#29
Senior Member
Profile: Join Date: Oct 2002
Location: Florida
Posts: 128
Computer Experience:
problem
JavaRa.exe ran but had a error when it was removing old ver of java
#30
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
Hi
Quote:
JavaRa.exe ran but had a error when it was removing old ver of java
OK go into Add and Remove Programs and delete the older versions
Quote:
c:\combofix folder and C:\ComboFix.txt was not removed?
Yes. but you don't need to just yet.Here Setup Disks for Floppy Boot Install from Microsoft so that we can use it to install the Recovery Console on your computer. No validation required! Please select the download link below that's appropriate for your Operating System then download and save the setup package to your desktop. If necessary, change the language version to match your installation. Do NOT change the name of the downloaded file Use the one below For XP professional SP3 .Service Pack 2 http://www.microsoft.com/downloads/d...C-0A0205368124 CF_RC.txt will open. Please post the contents of that log. Please do not reboot your machine until we have reviewed the log.
All times are GMT +1. The time now is 15:49 .
