View Single Post
Old 07-01-2009, 04:55 AM   #6 (permalink)
CatByte
Analyst, Security Team
 
CatByte's Avatar
 
Join Date: Jan 2009
Location: Canada
Posts: 2,166
OS: XP sp3


Re: ntoskrnl-hook trojan

Hi,

Please do the following:
  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below.
  • They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".

I have attached a script into this post for you to use with combofix.

SAVE this script to your desktop
then follow the rest of the instructions


  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you.
  • Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
Attached Files
File Type: txt CFScript.txt (2.6 KB, 6 views)
__________________


ASAP & UNITE Member

Last edited by CatByte; 07-01-2009 at 04:56 AM.
CatByte is offline