Hiya,
Please copy this page to
Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.
It's IMPORTANT to carry out the instructions in the sequence listed below.
***************************************************
Please download the following tools to any removable media and transfer to this infected system:
Combofix and save it to your desktop.
**Note: It is important that it is saved directly to your desktop**
-------------------------------------------------------------------
Deckard's System Scanner ran a cloned version of HijackThis since you were unable to connect to the internet to allow the download of the HijackThis.exe. We need a working copy on this system:
HijackThis 1.99.1.
-------------------------------------------------------------------
Before we begin, please move dss.exe to your desktop. While we’re cleaning your system, various tools used will clean the temp folder which, with dss.exe in it's current location, we'll lose the program.
-------------------------------------------------------------------
Open
notepad and copy/paste the entire text
in the quotebox below: (don't forget to copy and paste REGEDIT4)
Quote:
REGEDIT4
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"Windows Security"=-
|
Save the file as
"delete.reg".
Make sure to save it with the quotes. Choose to "Save type as - All Files"
It should look like this:
Double click on the
delete.reg file and choose
Yes to merge/add it to the registry. You may delete the file afterwards.
-------------------------------------------------------------------
Double click on
combofix.exe & follow the prompts.
When finished, it shall produce a log for you.
Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall
--------------------------------------------------------------------
Double-click on the file you just downloaded. Click on the
"Unzip" button to install. It will by default install to the directory -
C:\PROGRAM FILES\HIJACKTHIS\
Double click on
HijackThis.exe to run the program.
1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
--------------------------------------------------------------------
Please include the following in your next reply: (please copy/paste directly into the reply box)
C:\ComboFix.txt
HijackThis log
__________________
Member of ASAP since 2005
Member of UNITE since 2006
"It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."