Hello Husko -
Pancake has asked me to drop in...
Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.
It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.
---------------------------------------------------------------------------------------------
Open
notepad and copy/paste the text in the quotebox below into it:
Quote:
http://www.techsupportforum.com/security-center/hijackthis-log-help/169805-popup-ads-starting-show-my-laptop.html
Collect::
C:\WINDOWS\system32\wiobkoqo.dll
C:\WINDOWS\system32\awtqr.dll
C:\WINDOWS\system32\rhgekies.dll
C:\WINDOWS\system32\tvqqgjgj.exe
C:\WINDOWS\system32\vmyfwrkk.exe
C:\WINDOWS\system32\lsievahk.exe
Driver::
TnIDriver
File::
C:\WINDOWS\system32\rqtwa.bak1
Folder::
C:\Program Files\Enigma Software Group
C:\temp\0c2
C:\temp\brr
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{24BC6AF5-EA3F-451D-8D9B-5BE27D30ED09}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7D53A523-15A2-44F4-8F33-45AB380E8559}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\awtqr]
|
Save this as
CFScript.txt
Refering to the picture above, drag CFScript.txt into ComboFix.exe
When finished, it shall produce a log for you, C:\ComboFix.txt. Post that log in your next reply.
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
When CF finishes running, the ComboFix log will open along with a message box--do not be alarmed. With the above script, ComboFix will capture a file to submit for analysis.
Ensure you are connected to the internet and click OK. A browser will open. Simply follow the instructions to copy/paste/send the requested file.
---------------------------------------------------------------------------------------------
Next, please run a scan with HijackThis (not DSS!) and post it's log.
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006