#1
Member
Profile: Join Date: Dec 2008
Posts: 4
Computer Experience:
[Active] Xp Hangs in normal mode no internet in safe mode with networking
Hisp3 I just ran combofix - it removed a bunch of malaware and everything seems to be working again.
Last edited by darkpix; 27th December 2008 at 08:29 .
Didn't find the information you thought to find?Similar Threads
#2
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Welcome to WindowsBBS darkpix
#3
Member
Profile: Join Date: Dec 2008
Posts: 4
Computer Experience:
hi noahdfear, thanks. I had missed your reply, 0 0007E00-D260D260_Backup0 0007E00-D260D260seo .dllTCP "= 3703:TCP :Adobe Version Cue CS3 ServerTCP "= 3704:TCP :Adobe Version Cue CS3 ServerTCP "= 50900:TCP :Adobe Version Cue CS3 ServerTCP "= 50901:TCP :Adobe Version Cue CS3 ServerTCP "= 3389:TCP :@xpsp2res.dll,-22009http://www.gmer.net
#4
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Little bit of cleanup yet to do. Once again, disable any realtime protection applications. Highlight and copy the contents of the code box below and paste it into a blank notepad, then save it to your desktop as;CFScript.txt All Files (*.*)
Code:
File::
c:\windows\system32\wvUKBRHw.dll
c:\windows\system32\worajiju.dll
c:\windows\Tasks\kaxnfrcg.job
c:\windows\Tasks\uxgezwnm.job Close all other windows and programs . Now drag the CFScript.txt onto ComboFix.exe and drop it, using the left mouse button. Combofix should run and may reboot the computer when it's done. A log will open when it's complete. Post the contents of that log.Please do not click on the ComboFix window while it is running a scan. This can cause it to stall. **NOTE - Allow ComboFix to update if prompted.
#5
Member
Profile: Join Date: Dec 2008
Posts: 4
Computer Experience:
thank you noahdfear, I truly appreciate your time and expertise.
#6
Member
Profile: Join Date: Dec 2008
Posts: 4
Computer Experience:
hi0 0007E00-D260D260_Backup0 0007E00-D260D260seo .dllTCP "= 3703:TCP :Adobe Version Cue CS3 ServerTCP "= 3704:TCP :Adobe Version Cue CS3 ServerTCP "= 50900:TCP :Adobe Version Cue CS3 ServerTCP "= 50901:TCP :Adobe Version Cue CS3 ServerTCP "= 3389:TCP :@xpsp2res.dll,-22009http://www.gmer.net cf ,cb,66,a2,fb,0f,5a,49,88,2e,61,09,5d,c4,f7,57,4e,7c,b2,69,4a, \cf ,32,87,05,d9,06,70,fd,3c,83,79,b8,be,81,fa,89,78,62,db,82,eb,38,d4, \ad ,68,1b,c8,4a,9b,03ad ,02,87ad ,a2,e7,8a,bf,05,5ead ,8a,b6,c4,05,e8,5a,bd,9a,e9,d4,1a,3d,68,9d,00,32,20ad ,8e,89,15,6d,02,4b,37,11, \cf ,cb,66,a2,fb,0f,5a,49,88,2e,61,09,5d,c4,f7,57,4e,7c,b2,69,4a, \cf ,32,87,05,d9,06,70,fd,3c,83,79,b8,be,81,fa,89,78,62,db,82,eb,38,d4, \
#7
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Looks good. Lets get an online scan to be sure we haven't missed something. Please do an online scan with Kaspersky Online Scanner Accept , when prompted to download and install the program files and database of malware definitions.Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database.
Please be patient as this can take several minutes.
Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
Click View scan report at the bottom.
Click the Save Report As... button.
Click the Save as Text button to save the file to your desktop so that you may post it in your next reply.
**Note** Close any open programs.
Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan.
All times are GMT +1. The time now is 20:06 .
