#1
Member
Profile: Join Date: Feb 2009
Posts: 7
Computer Experience:
[Active] IE won't run
Here is the thread I first openned. I was instructed to open a new thread here. The URL was IE won't run HJT Report ===============js : browser.startup.homepage - hxxp://www.google.com/igSP2 (KB936181)SP2 (KB954430)
Didn't find the information you thought to find?Similar Threads
#2
Staff
Profile: Join Date: May 2002
Location: Staffordshire, UK
Posts: 21,699
Computer Experience:
Thanks
#3
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Hi grenny47,How to use ComboFix here , saving the file to your desktop.this link for your applicable programs.Close all open programs and windows Double click ComboFix.exe and follow the prompts.
It may reboot your computer and resume running when you logon. Wait for it to complete. When finished, it will open a log for you. Post that log in your next reply.
Note: Do not mouseclick combofix's window while its running. That may cause it to stall **NOTE - I recommend you allow the Recovery Console to be downloaded and installed if or when prompted.
#4
Member
Profile: Join Date: Feb 2009
Posts: 7
Computer Experience:
Noahdfear, While I was running combofix I got this error message requesting me to run Chkdsk utility (The file or directory\Documents and Settings\Tom\Start Menu\Programs\SmartDraw 2009 is corrupt and unreadable. Please run the Chkdsk utility. Should I run this or not?FAT32 0 2000000afa0564a517C.manifest0 2000000afa0564a517O.manifest0 2000000afa0564a517P.manifest0 2000000afa0564a517S.manifestTCP "= 3703:TCP :Adobe Version Cue CS3 ServerTCP "= 3704:TCP :Adobe Version Cue CS3 ServerTCP "= 50900:TCP :Adobe Version Cue CS3 ServerTCP "= 50901:TCP :Adobe Version Cue CS3 Serverjs : browser.startup.homepage - hxxp://www.google.com/igjs : yahoo.homepage.dontask - true.http://www.gmer.net
#5
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Once again, please disable any realtime protection applications. Highlight and copy the contents of the code box below and paste it into a blank notepad, then save it to your desktop as;CFScript.txt All Files (*.*)
Code:
http ://www.windowsbbs.com/malware-virus-removal/81364-active-ie-wont-run.html#post443811
File::
c:\windows\DUMP1339.tmp
c:\windows\DUMP12ad.tmp
Collect::
c:\program files\Common Files\typowuma.bat
c:\program files\Common Files\gixefepo.dll
c:\documents and settings\tom\Application Data\hohup.com
c:\documents and settings\All Users\Application Data\verib.sys
c:\documents and settings\tom\Application Data\olamype.com
c:\program files\Common Files\agyniqybaw.com
c:\windows\pudidyteh.dll
c:\program files\Common Files\ysigopan.dl
c:\program files\Common Files\pode.inf
c:\program files\Common Files\vevan.dat
c:\program files\Common Files\mesuka.vbs
RegNull::
[HKEY_USERS\S-1-5-21-4228801649-2419863050-430390485-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{2D1A9BC1-3DF1-BE48-E93C-4326A2A10A0D}*]
Driver::
mailKmd Close all other windows and programs . Now drag the CFScript.txt onto ComboFix.exe and drop it, using the left mouse button. Combofix should run and may reboot the computer when it's done. A log will open when it's complete. Post the contents of that log here.Please do not click on the ComboFix window while it is running a scan. This can cause it to stall. **NOTE - Allow ComboFix to update if prompted.
#6
Member
Profile: Join Date: Feb 2009
Posts: 7
Computer Experience:
I just want to let you know that after running ComboFix my laptop started working fine. While it was running it found several bad files and a registry entry and fixed them all. Since my machine is running OK, should I continue with your last instruction?
#7
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Yes, please complete those instructions. While your symptoms may have subsided, there are still things that need to be done to complete the cleanup.
#8
Member
Profile: Join Date: Feb 2009
Posts: 7
Computer Experience:
ComboFix 09-02-12.03 - tom 2009-02-14 16:23:12.3 - FAT32 TCP "= 3703:TCP :Adobe Version Cue CS3 ServerTCP "= 3704:TCP :Adobe Version Cue CS3 ServerTCP "= 50900:TCP :Adobe Version Cue CS3 ServerTCP "= 50901:TCP :Adobe Version Cue CS3 Serverjs : browser.startup.homepage - hxxp://www.google.com/igjs : yahoo.homepage.dontask - true.http://www.gmer.net
#9
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Your log looks good. Lets get a second opinion before we decalre it clean. Please do an online scan with Kaspersky Online Scanner Accept , when prompted to download and install the program files and database of malware definitions.Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database.
Please be patient as this can take several minutes.
Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
Click View scan report at the bottom.
Click the Save Report As... button.
Click the Save as Text button to save the file to your desktop so that you may post it in your next reply.
**Note** Close any open programs.
Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan.
#10
Member
Profile: Join Date: Feb 2009
Posts: 7
Computer Experience:
It seems to have found only one file infected. I have deleted that file.
#11
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Provided things are working normally again, lets cleanup our tools. Click Start>Run and type ComboFix /u then hit Enter to uninstall ComboFix and remove the files it has quarantined. This action will also reset the System Restore points, removing any infected files there as well. Qoobox and C:\ComboFix folders were removed, as well as the C:\ComboFix.txt file.
All times are GMT +1. The time now is 08:45 .
