View Single Post
Old 08-17-2008, 07:50 AM   #26 (permalink)
mimartin
Registered User
 
Join Date: Aug 2008
Posts: 17
OS: xp, service pack 3


Re: "Windows Security Alert" continues after XPAntivirus removed

Hi,

I ran the new CFScript, but early in the execution the system rebooted. When I logged back in, ComboFix didn't automatically continue as it did last time it rebooted - no log either.

I did notice on the desktop a zip file named [4]-Submit_2008-08-17@8.34.zip. It contains three files: catchme.log, UiHlp.dll.vir, and wdgzyfmf.exe.vir. It is only 1.51KB.

I also noticed two other similarly named files, I guess from the previous 2 attempts with ComboFix. They are 169KB and 418KB in size.

Combofix gave a prompt that there is an updated version available. I didn't update it to avoid interfering with the script.

Please let me know if I should try to rerun the CFScript.

Thanks,
Michael.
mimartin is offline