View Single Post
Old 12-16-2007, 03:37 AM   #5 (permalink)
TheBruce1
Moderator, Analyst, Security Team
 
TheBruce1's Avatar
 
Join Date: Oct 2006
Location: Důn Čideann,Scotland.
Posts: 5,093
OS: XP


Re: Random IE7 windows opening

Hello again

Please follow all instructions and in which order they come,if you have any questions,please ask before proceeding.

=======================

Open notepad and copy/paste the text in the quotebox below into it:

Quote:
KillAll::

File::
C:\WINDOWS\system32\rmxnipsy.ini
C:\WINDOWS\system32\tuwhatap.ini
C:\WINDOWS\system32\coqvvdru.ini
C:\WINDOWS\system32\vpnowhmc.ini
C:\WINDOWS\system32\yupfrdhf.ini
C:\WINDOWS\system32\twasbhll.ini
C:\WINDOWS\system32\hhskudnm.ini
C:\WINDOWS\system32\qxblkfcj.ini
C:\WINDOWS\system32\vdhvxsoo.ini
C:\WINDOWS\system32\mdbgbggf.ini
C:\WINDOWS\system32\vgmovwdl.ini
C:\WINDOWS\system32\cohyegco.ini
C:\WINDOWS\system32\ordsbstv.ini
C:\WINDOWS\system32\gypsbvdf.ini
C:\WINDOWS\system32\bbbay.bak1
C:\WINDOWS\system32\cffhk.bak1
C:\WINDOWS\system32\cffhk.bak2
C:\WINDOWS\system32\dfeeg.bak1
C:\WINDOWS\system32\dfeeg.bak2

DirLook::
C:\my computer friend
Save this as CFscript




Refering to the picture above, drag CFscript into ComboFix.exe

Follow the prompts, and post the resulting log, C:\ComboFix.txt

Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.


Warning:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

========================

Open HijackThis and click on 'Do a System Scan and save a Logfile'. Save the log file and post it here.

=========================
Logs Required
C:\Combofix.txt
Hijackthis log
__________________
Member of ASAP since 2007
Member of UNITE since 2008


**Notice to BT customers**
BT to dump Phorm, see Here for more information. No DPI

If we have helped you in anyway, please consider Donating
TheBruce1 is offline