Tech Support Forum - View Single Post

sUBs · 10-02-2007, 10:05 AM

Go to Start > Control Panel > Add or Remove Programs and uninstall the following programs:

SpyHunter

Please note any other programs that you dont recognize in that list in your next response

---------------

Open notepad and copy/paste the text in the quotebox below into it:

Code:

File::
C:\WINDOWS\system32\ddcya.dll
C:\WINDOWS\system32\VundoFixSVC.exe
C:\WINDOWS\system32\awtqq.dll
C:\WINDOWS\system32\geedd.dll
Folder::
C:\WINDOWS\system32\vMW10a
C:\TEMP\xOe
C:\Program Files\Enigma Software Group
C:\VundoFix Backups
Driver::
EGXHXEFWZF
Registry::
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F884BE4E-64D5-43FE-80A4-DB8D63C748F0}]

Save this as "CFScript"

Refering to the picture above, drag CFScript.txt into ComboFix.exe

When finished, it shall produce a log for you, C:\ComboFix.txt. Post that log in your next reply.

---------------

Click here perform an online scan >> Online Scanner

---------------

In your next post, please include fresh logs from:

Fresh Hijackthis log taken just before replying

Online scan

ComboFix's log

Please provide details of any problems you encountered whilst performing the above steps & update us on how the computer behaves now

10-02-2007, 10:05 AM	#6 (permalink)
sUBs Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy Join Date: May 2005 Posts: 24,486 OS: N/A	Re: Need a binary shotgun for Trojan.Vundo Go to Start > Control Panel > Add or Remove Programs and uninstall the following programs: SpyHunter Please note any other programs that you dont recognize in that list in your next response --------------- Open notepad and copy/paste the text in the quotebox below into it: Code: File:: C:\WINDOWS\system32\ddcya.dll C:\WINDOWS\system32\VundoFixSVC.exe C:\WINDOWS\system32\awtqq.dll C:\WINDOWS\system32\geedd.dll Folder:: C:\WINDOWS\system32\vMW10a C:\TEMP\xOe C:\Program Files\Enigma Software Group C:\VundoFix Backups Driver:: EGXHXEFWZF Registry:: [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F884BE4E-64D5-43FE-80A4-DB8D63C748F0}] Save this as "CFScript" Refering to the picture above, drag CFScript.txt into ComboFix.exe When finished, it shall produce a log for you, C:\ComboFix.txt. Post that log in your next reply. --------------- Click here perform an online scan >> Online Scanner --------------- In your next post, please include fresh logs from: Fresh Hijackthis log taken just before replying Online scan ComboFix's log Please provide details of any problems you encountered whilst performing the above steps & update us on how the computer behaves now __________________ Question - what have you done for the community today?