That's strange. The link to the ComboFix guide works for me. Where abouts did it break down for you?
Lets continue on with your fix.
Open HijackThis and click on 'Do a System Scan Only'. Check the following entries
(If they still exist, make sure you do not miss any)
O17 - HKLM\System\CS2\Services\Tcpip\..\{4ADACCDD-62B5-449D-B840-AC994C684D6F}: NameServer = 85.255.112.11;85.255.112.93
Please remember to close all other windows, including browsers then click Fix checked.
--------------------------------------------------------------
Go to Start->Run and type in
regedit and hit OK. Go to File->Export and save the registry somewhere as a backup. Close the Registry Editor now.
Open
notepad and
copy/paste the
text in the quotebox below:
(don't forget to copy and paste
REGEDIT4)
Quote:
REGEDIT4
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bed46197-a540-11dd-a4a8-0017315276a8}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\C]
|
Save the file as
"delete.reg". Make sure to save it with the quotes. Choose to
"Save type as - All Files"
It should look like this:
Double click on the
delete.reg file and choose
Yes to merge/add it to the registry. You may delete the file afterwards.
--------------------------------------------------------------
Establish an internet connection & perform an online scan with Internet Explorer at
Kaspersky Online Scanner
Answer Yes, when prompted to install an ActiveX component.
- The program will then begin downloading the latest definition files.
- Once the files have been downloaded click on NEXT
- Locate the Scan Settings button & configure to:
- Scan using the following Anti-Virus database:
- Scan Options:
- Scan Archives
- Scan Mail Bases
- Click OK & have it scan My Computer
- Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
- Click the Save as Text button to save the file to your desktop so that you may post it in your next reply
* Turn off the real time scanner of any existing antivirus program while performing the online scan
--------------------------------------------------------------
Please run HiJackThis again and post the resulting log.
Also, please update me on how your system is behaving