Tech Support Forum - View Single Post - System32 folder's in quarantine

sUBs · 10-14-2007, 02:41 PM

Open notepad and copy/paste the text in the quotebox below into it:

Code:

Folder::
C:\Program Files\Temporary
C:\WINDOWS\system32\abc2
C:\WINDOWS\system32\ep1
C:\Documents and Settings\Eunice\Application Data\load else ooze
C:\Documents and Settings\All Users.WINDOWS\Application Data\loadcopydatajunk
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{37F0F8AE-AC34-462C-9EAE-D5E961ABF59B}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ssqrrpq]

Save this as "CFScript"

Refering to the picture above, drag CFScript.txt into ComboFix.exe

When finished, it shall produce a log for you, C:\ComboFix.txt. Post that log in your next reply.

---------------

Click here perform an online scan >> Online Scanner

---------------

In your next post, please include fresh logs from:

Fresh Hijackthis log taken just before replying

Online scan

ComboFix's log

Please provide details of any problems you encountered whilst performing the above steps & update us on how the computer behaves now

10-14-2007, 02:41 PM	#5 (permalink)
sUBs Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy Join Date: May 2005 Posts: 24,325 OS: N/A	Re: System32 folder's in quarantine - Log Open notepad and copy/paste the text in the quotebox below into it: Code: Folder:: C:\Program Files\Temporary C:\WINDOWS\system32\abc2 C:\WINDOWS\system32\ep1 C:\Documents and Settings\Eunice\Application Data\load else ooze C:\Documents and Settings\All Users.WINDOWS\Application Data\loadcopydatajunk Registry:: [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{37F0F8AE-AC34-462C-9EAE-D5E961ABF59B}] [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ssqrrpq] Save this as "CFScript" Refering to the picture above, drag CFScript.txt into ComboFix.exe When finished, it shall produce a log for you, C:\ComboFix.txt. Post that log in your next reply. --------------- Click here perform an online scan >> Online Scanner --------------- In your next post, please include fresh logs from: Fresh Hijackthis log taken just before replying Online scan ComboFix's log Please provide details of any problems you encountered whilst performing the above steps & update us on how the computer behaves now __________________ Question - what have you done for the community today?