#1
Member
Profile: Join Date: Jan 2009
Posts: 5
Computer Experience:
[Active] Virtumonde Virus
Hi There,
Didn't find the information you thought to find?Similar Threads
#2
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Welcome to WindowsBBS Robert here , saving the file to your desktop.this link for your applicable programs.Close all open programs and windows Double click ComboFix.exe and follow the prompts.
It may reboot your computer and resume running when you logon. Wait for it to complete. When finished, it will open a log for you. Post that log in your next reply.
Note: Do not mouseclick combofix's window while its running. That may cause it to stall
#3
Member
Profile: Join Date: Jan 2009
Posts: 5
Computer Experience:
Combo Fix Log
Thanks for replying to my post.TCP "= 3128:TCP :avgjs : browser.startup.homepage - www.yahoo.co.uk http://www.gmer.net
#4
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
KernalFaultCheck means an application crashed and the system tried to write an entry to the registry. Don't worry about it at this time.
#5
Member
Profile: Join Date: Jan 2009
Posts: 5
Computer Experience:
Hi There,TCP "= 3128:TCP :avgjs : browser.startup.homepage - www.yahoo.co.uk http://www.gmer.net
#6
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Please download Flash_Disinfector by sUBs and save it to your desktop:Plug in your USB flash drive.
Double-click Flash_Disinfector.exe to run it.
Follow any prompts that may appear.
Your desktop will vanish for a while, and then reappear. This is normal.
Wait until the program has finished scanning, then please exit the program. If you use more than 1 flash drive, run the tool with each plugged in.
contents of the code box below and paste it into a blank notepad, then save it to your desktop as;CFScript.txt All Files (*.*)
Code:
File::
c:\windows\ijuzevuqana.dll
c:\windows\Tasks\ywdowcfz.job
Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=""
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bc402421-437f-11dc-93fe-000d61347b54}] Close all other windows and programs . Now drag the CFScript.txt onto ComboFix.exe and drop it, using the left mouse button. Combofix should run and may reboot the computer when it's done. A log will open when it's complete. Post the contents of that log.Please do not click on the ComboFix window while it is running a scan. This can cause it to stall. Kaspersky Online Scanner Accept , when prompted to download and install the program files and database of malware definitions.Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database.
Please be patient as this can take several minutes.
Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
Click View scan report at the bottom.
Click the Save Report As... button.
Click the Save as Text button to save the file to your desktop so that you may post it in your next reply.
**Note** Close any open programs.
Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan.
#7
Member
Profile: Join Date: Jan 2009
Posts: 5
Computer Experience:
Combo log Kasper log
Hi There,TCP "= 3128:TCP :avgjs : browser.startup.homepage - www.yahoo.co.uk http://www.gmer.net
#8
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Highlight and copy the contents of the code box below.
Code:
reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v c82f9f57 /f
exit
cls Click Start>Run and type cmd then hit enter to open a command window. Right click in the command window and select paste. The command window will close on it's own.ComboFix /u then hit Enter to uninstall ComboFix and remove the files it has quarantined. This action will also reset the System Restore points, removing any infected files there as well. Qoobox and C:\ComboFix folders were removed, as well as the C:\ComboFix.txt file.
#9
Member
Profile: Join Date: Jan 2009
Posts: 5
Computer Experience:
Hi There,
#10
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
The command was processed the on the first attempt. You get the error when manually typing the command because the key to delete is already gone. For an explanation of why you had no Paste option upon right clicking, see here .
All times are GMT +1. The time now is 20:59 .
