View Single Post
Old 12-09-2007, 06:35 PM   #17 (permalink)
LonnyRJones
Expert Analyst, Moderator, Security Team
 
Join Date: Sep 2006
Posts: 1,646
OS: xp


Re: Antivirus pop up message-W32/Dzan.a attack

Im glad he posted, have him take Pancake 's advice re-download and run Combofix, post another log.

One more task for you
Launch Notepad (not wordpad or other text editor), and copy and paste the contents of the code box below into a new text file.
Save it as file name: "fixme.reg" (not including the word code). Save as file type: All files (*.*) and save it on your Desktop.
Code:
REGEDIT4
;
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{23fbf5f0-6fcc-11db-bd80-005056c00008}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2b4d1570-d378-11db-aaef-005056c00008}]
;
Now double-click on the fixme.reg file you saved and click on the Yes button when it asks if you would like to merge the information. Once you get a successful message delete fixme.reg.

Restart your PC.

Also:
Uninstall combofix, go start run type in
combofix /u
hit ok or press enter

Post back if you need to
__________________


Our help is voluntary. But this site needs donations to operate.

Last edited by LonnyRJones; 12-09-2007 at 06:39 PM.
LonnyRJones is offline