View Single Post
Old 08-17-2008, 03:19 AM   #25 (permalink)
TheBruce1
Moderator, Analyst, Security Team
 
TheBruce1's Avatar
 
Join Date: Oct 2006
Location: Důn Čideann,Scotland.
Posts: 5,093
OS: XP


Re: "Windows Security Alert" continues after XPAntivirus removed

Hello again Michael

Open notepad and copy/paste the text in the quotebox below into it:

Quote:
http://www.techsupportforum.com/security-center/hijackthis-log-help/279088-windows-security-alert-continues-after-xpantivirus-removed.html
SkipFix::
Collect::
C:\Qoobox\Quarantine\C\Program Files\rcecdxf\UiHlp.dll.vir
C:\Qoobox\Quarantine\C\WINDOWS\system32\wdgzyfmf.exe.vir
Save this as CFscript







Refering to the picture above, drag CFscript into ComboFix.exe

Follow the prompts, and post the resulting log, C:\ComboFix.txt

Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.


Warning:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall


When CF finishes running, the ComboFix log will open along with a message box--do not be alarmed. With the above script, ComboFix will capture a file to submit for analysis.

Ensure you are connected to the internet and click OK. A browser will open. Simply follow the instructions to copy/paste/send the requested file(s).

If the files are uploaded successfully please post the Combofix.txt and a new Hijackthis Log.
__________________
Member of ASAP since 2007
Member of UNITE since 2008


**Notice to BT customers**
BT to dump Phorm, see Here for more information. No DPI

If we have helped you in anyway, please consider Donating
TheBruce1 is offline