|
Manager, Security Center, TSF Academy; Analyst, Security Team
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,168
OS: 2000 Pro; XP Pro; XP Home
|
I have attached a file to this post - cwheat2.zip Download this file to your desktop. Double click on the zip folder, then double click on the reg file within. Click yes to allow it to merge into your registry.
---------------------------------------------------------------------------------------------
Open HijackThis and click on 'Do a System Scan Only'. Check the following entries if they exist (make sure you do not miss any) and click Fix Checked
O4 - HKCU\..\Run: [Ynk] C:\WINDOWS\?ymantec\ping.exe
---------------------------------------------------------------------------------------------
Delete the following:
C:\WINDOWS\?ymantec<<<this may appear as Symantec, will contain a file which appears to be ping.exe
If it resists deletion, boot to safe mode and delete it from there.
---------------------------------------------------------------------------------------------
Please run combofix again, and post it's log, along with a new HijackThis log.
Please tell me what the Z drive is.
__________________
Practice Safe Surfing Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005
Proud Member of UNITE since 2006
Last edited by tetonbob; 09-19-2006 at 01:53 PM.
|