Thread: pop ups
View Single Post
Old 05-04-2007, 09:24 AM   #7 (permalink)
tetonbob
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,785
OS: 2000 Pro; XP Pro; XP Home


Re: pop ups

For some reason, you've chosen to run ComboFix again, instead of post the logs I requested from it's earlier two runs.

Please follow my instructions precisely, in order to help me help you.

First, do this:

Copy and paste the following into Notepad (don't forget to copy and paste REGEDIT4):

Quote:
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{9E93A147-E3F9-47AB-BAF0-915CCAAA7034}"=-
Save the file as "delete.reg". Make sure to save it with the quotes. It should look like this:

Close Notepad.

Double click on the delete.reg file and choose Yes to merge/add it to the registry. You may delete the file afterwards.

---------------------------------------------------------------------------------------------

Next.....

I need you to delete your existing version of ComboFix, as it is updated frequently.

Then, I need you to download combofix once again, from the following link.

ComboFix will eventually reboot your computer, and a textfile will open when it's completed it's tasks.

Do nothing with your machine until this textfile opens.
  1. Download combofix.exe to your desktop.
  2. Double click on combofix.exe & follow the prompts.
  3. When finished, it shall produce a log for you. Post that log in your next reply with a new HJT log
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall


---------------------------------------------------------------------------------------------
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Microsoft MVP - Consumer Security 2009
tetonbob is offline