Tech Support Forum - View Single Post

Ried · 12-08-2007, 11:45 AM

Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

Please download ATF Cleaner by Atribune.

***************************************************

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

---------------------------------------------------------------------

Double-click ATF-Cleaner.exe to run the program.

Under Main choose: Select All
Click the Empty Selected button.

If you use Firefox browser

Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main menu to close the program.

----------------------------------------------------------------

Open notepad and copy/paste the text in the code box below into it:

Code:

File::
C:\Documents and Settings\Ekta\Desktop\DASKTOP\New Folder\clsReg.dll 
D:\WINDOWS\Downloaded Program Files\NSupd9x.inf 
D:\WINDOWS\Downloaded Program Files\UniDist.inf 
D:\WINDOWS\INF\NSUPD9X.INF 
F:\New Folder\New Folder\clsReg.dll

Registry::
[-hkey_local_machine\software\microsoft\windows\currentversion\uninstall\Switch]

Save this as CFScript.txt, in the same location as ComboFix.exe

Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

--------------------------------------------------------------------

Please return with the C:\ComboFix.txt and an update on system bevior.

12-08-2007, 11:45 AM	#9 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 27,103 OS: WinXP and Vista	Re: Suspected Malware Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions. Please download ATF Cleaner by Atribune. ************************************************* 1. Close any open browsers. 2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix. --------------------------------------------------------------------- Double-click ATF-Cleaner.exe to run the program. Under Main choose: Select All Click the Empty Selected button. If you use Firefox browser Click Firefox at the top and choose: Select All Click the Empty Selected button. NOTE: If you would like to keep your saved passwords, please click No at the prompt. If you use Opera browser Click Opera at the top and choose: Select All Click the Empty Selected button. NOTE: If you would like to keep your saved passwords, please click No at the prompt. Click Exit on the Main menu to close the program. ---------------------------------------------------------------- Open notepad and copy/paste the text in the code box below into it: Code: File:: C:\Documents and Settings\Ekta\Desktop\DASKTOP\New Folder\clsReg.dll D:\WINDOWS\Downloaded Program Files\NSupd9x.inf D:\WINDOWS\Downloaded Program Files\UniDist.inf D:\WINDOWS\INF\NSUPD9X.INF F:\New Folder\New Folder\clsReg.dll Registry:: [-hkey_local_machine\software\microsoft\windows\currentversion\uninstall\Switch] Save this as CFScript.txt, in the same location as ComboFix.exe Refering to the picture above, drag CFScript into ComboFix.exe When finished, it shall produce a log for you at C:\ComboFix.txt** Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall -------------------------------------------------------------------- Please return with the C:\ComboFix.txt and an update on system bevior. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."