|
Re: "Windows Security Alert" continues after XPAntivirus removed
Hi,
I ran the new CFScript, but early in the execution the system rebooted. When I logged back in, ComboFix didn't automatically continue as it did last time it rebooted - no log either.
I did notice on the desktop a zip file named [4]-Submit_2008-08-17@8.34.zip. It contains three files: catchme.log, UiHlp.dll.vir, and wdgzyfmf.exe.vir. It is only 1.51KB.
I also noticed two other similarly named files, I guess from the previous 2 attempts with ComboFix. They are 169KB and 418KB in size.
Combofix gave a prompt that there is an updated version available. I didn't update it to avoid interfering with the script.
Please let me know if I should try to rerun the CFScript.
Thanks,
Michael.
|