Tech Support Forum - View Single Post

sUBs · 12-06-2008, 05:33 AM

Please visit this webpage for instructions for downloading and running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

Download & save ComboFix to your Desktop but don't run it yet
Open NOTEPAD and copy/paste the text in the quotebox below into it:

Code:

DDS::
BHO: {D5DF7C9D-6069-4552-8B0C-D02A912FC889} - ws.dll
mRun: [NWEReboot]
mRun: [915340387] "c:\documents and settings\all users\application data\1933087776\915340387.exe"
FILE::
c:\windows\system32\ws.dll

Save this as "CFScript"

Referring to the picture above, drag CFScript.txt into ComboFix.exe

When finished, it shall produce a log for you, C:\ComboFix.txt.

12-06-2008, 05:33 AM	#2 (permalink)
sUBs Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy Join Date: May 2005 Posts: 24,489 OS: N/A	Re: winweb security popups Please visit this webpage for instructions for downloading and running ComboFix: http://www.bleepingcomputer.com/comb...o-use-combofix Download & save ComboFix to your Desktop but don't run it yet Open NOTEPAD and copy/paste the text in the quotebox below into it: Code: DDS:: BHO: {D5DF7C9D-6069-4552-8B0C-D02A912FC889} - ws.dll mRun: [NWEReboot] mRun: [915340387] "c:\documents and settings\all users\application data\1933087776\915340387.exe" FILE:: c:\windows\system32\ws.dll Save this as "CFScript" Referring to the picture above, drag CFScript.txt into ComboFix.exe When finished, it shall produce a log for you, C:\ComboFix.txt.