Hi again
How is your system running now?
CF includes a temp file cleaner – although there should not be any change in the size of your hard disk.
We’ll have a look later in these instructions.
Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.
Combofix
- Close any open browsers.
- Open notepad and copy/paste the text in the box below into it:
Code:
File::
C:\WINDOWS\winhost_app.dll
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5E06398E-3017-467B-A399-18425A20F655}]
Looking at the image below as an example
Save this as
CFScript.txt, in the same location as ComboFix.exe
Refering to the picture above, drag
CFScript onto
ComboFix.exe.
When finished, it will produce a log for you at
"C:\ComboFix.txt"
Do not mouseclick combofix's window whilst it's running. This may cause it to stall.
CAUTION! Anyone else thinking of using the above script does so at their own risk - you may end up having to re-install Windows!
Download
Deckard's System Scanner (DSS) to your
Desktop .
Note: You must be logged onto an account with administrator privileges.- Close all applications and windows.
- Double-click on dss.exe to run it, and follow the prompts.
- When the scan is complete, two text files will open - minimised > extra.txt and maximised > main.txt.
- Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt back in this thread (do not attach it).
- Please attach extra.txt to your post.
To attach a file to a new post, simply
- Click the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
- copy and paste the following into the "Upload File from your Computer" box:
C:\Deckard\System Scanner\extra.txt
- Click Upload.
Please post the log
C:\ComboFix.txt along with the logs from DSS and a fresh
HijackThis Log for further review.