| Joe_London |
| (HijackThis Helper) |
| Fri Feb 15 2008 04:06 PM |
|
Re: help with father-in-laws hijack this log please
|
Hi Jim,
Quote:
the computer is running 100 times better,maintaining internet connection, desktop has been restored and various virus/trojan/malware scans have shown nothing.
Thats good to hear.
Quote:
when i first tried to drag CFScript.txt into combofix it told me combofix had expired, so i had to download it again - not sure if that caused any problems.
Its a time limited programme thats continually updated so thats fine.
Its not a major issue but unfortunately it didn't edit the registry key as I'd hoped but that may be my fault.
Let try this method:
Copy this page to *Notepad* and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.
It's IMPORTANT to carry out the instructions in the sequence listed below.
1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Open *notepad*
Copy and paste all the text in the quotebox below into it:
Quote:
KillAll::
Registry::
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,"
Save this as CFScript.txt, in the same location as ComboFix.exe which is on the Desktop.
If the image isn't visible Click Here to view.
Refering to the picture above, drag CFScript.txt into ComboFix.exe
This reactivates Combofix. Again follow the prompts.
It will create another System restore point.
When finished, it shall produce a log for you at C:\ComboFix.txt
Copy and paste the ComboFix.txt log in your next reply.
*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall*
Joe.