Solved Applications wont open, possible malware/virus present

Hi
OK that's great to see.

Please do this.

Click Start > Run in the run box copy and paste or type ComboFix /u then hit Enter to uninstall ComboFix and remove the files/folders it created. This action will also reset the System Restore points, removing any infected files there as well.

Let me know how things are running.

Thanks
Geri

 

Geri,

Combofix was successfully uninstalled. Do I still need to send the two files? I cannot locate them still. So far, I havent encountered any problems in my laptop. Just let me know what I still need to do. Thanks

 

Hi

I think noahdfear would still like to look at them, but it is hard to send them if you can't locate them.

I'll ask him if he still thinks it necessary, if he does I'll see if there is another way to get them to him.

I'll get back to you.

Geri

 

Hi
OK noahdfear would still like to see them.

Please do this.


Highlight and copy the contents of the code box below.

Code:

attrib -h -r -s C:\WINDOWS\ms.config`.exe
attrib -h -r -s C:\WINDOWS\msrm.exe
attrib -h -r -s C:\WINDOWS\NT.Config`.exe
attrib -h -r -s C:\WINDOWS\rm.exe
attrib -h -r -s C:\WINDOWS\system32\nmllm.ini2
del /q C:\WINDOWS\ms.config`.exe
del /q C:\WINDOWS\msrm.exe
del /q C:\WINDOWS\system32\nmllm.ini2
exit
cls

Click Start then Run, type cmd in the Run box then hit Enter to open a command window.
Right click in the command window and Paste the copied text.
The command window will close on it's own.

Now go to noahdfear's submission channel.
Copy the first bolded line below and paste it in the box next to the Browse button.

C:\WINDOWS\NT.Config`.exe

Type Requested by Geri in the comments box then click Send File.
Repeat the process with the next bolded line below.

C:\WINDOWS\rm.exe

Thanks
Geri

 

Geri,

I already submited the files to noahdfear as you instructed. thanks

 

Hi
OK thanks.

I will see what he finds with them. I will let you know if we need to deal with them or if we can move on.

Geri

 

Hi
Ok have not heard anything on those files, so I'll mark this one resolved for now.

I'll PM you if I hear anything bad.

Surf Safely
Geri