Tech Support Forum - View Single Post - IE Pop-ups

1972vet · 08-06-2008, 09:24 PM

Please open a blank Notepad by clicking start-->run
Then, in the run box type Notepad.exe and click "OK".
Copy the below text in Bold and paste it into the blank Notepad. Save it as CFScript.txt...Change the "Save as type" to All Files and save it to your desktop. Now drag the text document over to your Combofix.exe

Combofix will run again automatically. Please post back the new log that will be generated. Thanks!

File::
C:\WINDOWS\system32\7QyLIJJC.exe
C:\WINDOWS\system32\7QyLIJJC.exe.a_a
C:\WINDOWS\system32\j3I5TrWw.exe
C:\WINDOWS\system32\j3I5TrWw.exe.a_a
F:\Secret.exe

Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8b8a3920-d98b-11dc-a3b7-00114368b89a}]

08-06-2008, 09:24 PM	#12 (permalink)
1972vet Analyst, Security Team Join Date: Jun 2008 Location: Midwest, U.S.A. Posts: 557 OS: Dual Boot Setup, Vista SP2 and XPSP3	Re: IE Pop-ups - Malware Please open a blank Notepad by clicking start-->run Then, in the run box type Notepad.exe and click "OK". Copy the below text in Bold and paste it into the blank Notepad. Save it as CFScript.txt...Change the "Save as type" to All Files and save it to your desktop. Now drag the text document over to your Combofix.exe Combofix will run again automatically. Please post back the new log that will be generated. Thanks! File:: C:\WINDOWS\system32\7QyLIJJC.exe C:\WINDOWS\system32\7QyLIJJC.exe.a_a C:\WINDOWS\system32\j3I5TrWw.exe C:\WINDOWS\system32\j3I5TrWw.exe.a_a F:\Secret.exe Registry:: [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8b8a3920-d98b-11dc-a3b7-00114368b89a}] __________________ Disabled Veteran, U.S.C.G. 1972 - 1978 Windows XP Performance and Maintenance Windows Vista Performance and Maintenance