Hi again
Looks like there was a glitch in my Registry fix - we'll try again.
Combofix
- Close any open browsers.
- Open notepad and copy/paste the text in the box below into it:
Code:
File::
I:\f0.cmd
G:\cfdflx.com
G:\RavMon.exe
Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4468579e-28d8-11dd-a4e7-005056c00008}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5b2c3e5e-f5b7-11dc-a3e2-005056c00008}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7456a580-7166-11db-9d4b-0040cadbf51d}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8508c5dc-9d4e-11dd-a688-005056c00008}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ab9d60ed-5a8a-11dd-a593-005056c00008}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d262192a-a225-11dc-a2db-005056c00008}]
Looking at the image below as an example
Save this as
CFScript.txt, in the same location as ComboFix.exe
Refering to the picture above, drag
CFScript onto
ComboFix.exe.
When finished, it will produce a log for you at
"C:\ComboFix.txt"
Do not mouseclick combofix's window whilst it's running. This may cause it to stall.
CAUTION! Anyone else thinking of using the above script does so at their own risk - you may end up having to re-install Windows!
Please post the log
C:\ComboFix.txt for further review.
Online Scan
Perform an online scan with
Panda ActiveScan- Click on Scan Your PC Now
- A "pop up" window will appear, or a new tab will open.
- Click on Register
- Choose the option you like most, but we recommend the Free Registration.
- Click on Register
- Enter your e-mail address, and create a password.
- Select "I do not want to receive any type of information". (unless you want to receive such information)
- Click on Send
- Confirm registration, and continue by entering your user name and password, then click on Enter
- Select Full Scan, then Click on Scan Now
- Wait for the components to be loaded and installed. Don't close this window or go to another page while it is downloading. You can continue using the Internet by opening another window in your browser.
- If it finds any malware it can disinfect, the Disinfect button will be enabled. Click on Disinfect
- Please ignore the offer to buy the program. Click on Export To
- Export the log and save it to your desktop.
- Please attach the contents of that log to your reply.
* Turn off the real time scanner of any existing antivirus program while performing the online scan.