What happens?
Please try running it in Safe Mode, from your user account. To access safe mode, restart your computer and begin tapping F8 to enable the...
With a message up, click the PrintScreen key, generally located along the top of the Keyboard next to F12. Open Paint, click Edit>Paste. It should...
Highlight and copy the bolded command below. "%userprofile%\desktop\dss.exe" /daft Click Start>Run and paste the command in, then hit...
Works Portfolio ......... If the icon is still on the desktop, click the colored boxes and it will expand the icon. Click Tasks, then...
Hi jamsheed1 :) Next time one of those messages pops up, click the message window once to make sure it is selected as the active window, then...
Welcome to WindowsBBS bluemary1014 :) I'd like to first respond to your questions/comments in regards to ComboFix. No, ComboFix does not do...
Please delete the ComboFix.exe file you currently have and download a fresh copy from here, saving it to your desktop. Once again, please...
You're most welcome. Glad I could help. :)
Appears the part of the infection was re-introduced. Please delete the ComboFix.exe file you currently have and download a fresh copy from here,...
Copy the bolded command below. start notepad "C:\Documents and Settings\Owner\zz.dat " Now click Start>Run and paste the command then hit...
A bit late to the party here, but I'm very curious to know what Antivirus/Firewall software (AND VERSION) you have installed on this system. I...
I knew that folder looked suspicious, but I wasn't expecting that! :eek: I've edited all those posts. :) Here's the good news ........ that folder...
CF log received. :) Just so you know, the files I bolded below are not rogue. They are just left behind by Smitfraud fix and I've included them...
Hi Denise, Your logs look fine. Is there a reason we're checking for infections, eg; problems? For the record, those logs alone are no...
Great! Now we need to check on a few things, one of which is if a command window will process commands correctly. We're also going to search for a...
Yes. Please send to me here. Put RE: smitRem in the subject line.
Delete the following files/folders. C:\Deckard C:\Documents and Settings\Owner\My Documents\craigs stuff\mb.exe C:\Documents and...
Place a copy of all 3 files in the driveroot of C: ---- do not edit the boot.ini I believe you will also need to edit the BCD Windows Legacy...
Try replacing NtDetect.com from either the local i386 or the XP cd (i386).
Separate names with a comma.