Tech Support Forum - View Single Post - Really wierd problem with browsers and other things.

sUBs · 12-06-2008, 06:14 PM

Please visit this webpage for instructions for downloading and running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

Download & save ComboFix to your Desktop but don't run it yet
Open NOTEPAD and copy/paste the text in the quotebox below into it:

Code:

DDS::
mRun: [MyWebSearch Email Plugin] c:\progra~1\mywebs~1\bar\1.bin\mwsoemon.exe
mRun: [My Web Search Bar] rundll32 c:\progra~1\mywebs~1\bar\1.bin\MWSBAR.DLL,S
dRun: [Power2GoExpress] NA
mExplorerRun: [kernel32.dll] c:\windows\system32\atmclk.exe
IE: &Search - http://kl.bar.need2find.com/KL/menusearch.html?p=KL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
SSODL: fairydom - {5839511e-ec1b-4f91-ace3-fb88e52f5239} - c:\windows\system32\jevtxpg.dll
STS: {05a91164-3c96-47d6-aa74-2c855791b2d0} - c:\windows\system32\ofcukiz.dll
File::
c:\windows\1.ini
c:\windows\system32\wow71_724.dll
c:\windows\syscheck
c:\documents and settings\owner\.exe

Save this as "CFScript"

Referring to the picture above, drag CFScript.txt into ComboFix.exe

When finished, it shall produce a log for you, C:\ComboFix.txt.

12-06-2008, 06:14 PM	#6 (permalink)
sUBs Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy Join Date: May 2005 Posts: 24,353 OS: N/A	Re: Really wierd problem with browsers and other things. Please visit this webpage for instructions for downloading and running ComboFix: http://www.bleepingcomputer.com/comb...o-use-combofix Download & save ComboFix to your Desktop but don't run it yet Open NOTEPAD and copy/paste the text in the quotebox below into it: Code: DDS:: mRun: [MyWebSearch Email Plugin] c:\progra~1\mywebs~1\bar\1.bin\mwsoemon.exe mRun: [My Web Search Bar] rundll32 c:\progra~1\mywebs~1\bar\1.bin\MWSBAR.DLL,S dRun: [Power2GoExpress] NA mExplorerRun: [kernel32.dll] c:\windows\system32\atmclk.exe IE: &Search - http://kl.bar.need2find.com/KL/menusearch.html?p=KL IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - SSODL: fairydom - {5839511e-ec1b-4f91-ace3-fb88e52f5239} - c:\windows\system32\jevtxpg.dll STS: {05a91164-3c96-47d6-aa74-2c855791b2d0} - c:\windows\system32\ofcukiz.dll File:: c:\windows\1.ini c:\windows\system32\wow71_724.dll c:\windows\syscheck c:\documents and settings\owner\.exe Save this as "CFScript" Referring to the picture above, drag CFScript.txt into ComboFix.exe When finished, it shall produce a log for you, C:\ComboFix.txt.