Home   News  Product reviews  Website reviews  Forums   Competitions  Subscribe 

Security >> HijackThis logs help and analysis

 |  Print Thread
bricatModerator
HijackThis Helper


Reg'd: Wed
Posts: 29170
Loc: belfast
Re: Unusual behaviour on comp.
      Tue Apr 15 2008 08:44 AM

Please copy this page to *Notepad* and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

It's IMPORTANT to carry out the instructions in the sequence listed below.


1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.


Open *notepad* and copy/paste the text in the quotebox below into it:

Quote:



Killall::

File::
C:\WINDOWS\system32\jkkJcyXN.dll_old
C:\WINDOWS\system32\ddcAQgee.dll

Registry::
[-HKEY_LOCAL_MACHINE\~\BrowserHelperObjects\{3CFCC23E-F175-47F6-B8D8-FD96A0EC8B51}]
[-HKEY_LOCAL_MACHINE\~\BrowserHelperObjects\{A70BAFD9-D851-4918-879F-DB2B103D3E88}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windowsnt\currentversion\winlogon\notify\cbXRLcAq]






Save this as CFScript.txt, in the same location as ComboFix.exe which is on the Desktop.




Referring to the picture above, drag CFScript.txt into ComboFix.exe

Restart your computer.

When finished, it shall produce a log for you at C:\ComboFix.txt

Please copy and paste the ComboFix.txt along with a fresh HijackThis log in your next reply please and
let me know how it is running.


*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall*

--------------------
MY HELP IS FREE,BUT PLEASE CONSIDER GIVING A DONATION TO HELP IN MY FIGHT AGAINST SPYWARE.

You don't stop laughing when you get old, you get old when you stop laughing!

Post Extras Print Post   Remind Me!     Notify Moderator
Rate this thread

Jump to


Entire topic
Subject Posted by Posted on
* Unusual behaviour on comp. Andybib Sun Apr 13 2008 12:48 AM
. * * Re: Unusual behaviour on comp. Andybib   Sun Apr 13 2008 10:00 AM
. * * Re: Unusual behaviour on comp. bricatModerator   Sun Apr 13 2008 06:44 PM
. * * Re: Unusual behaviour on comp. Andybib   Sun Apr 13 2008 07:35 PM
. * * Re: Unusual behaviour on comp. bricatModerator   Mon Apr 14 2008 08:44 AM
. * * Re: Unusual behaviour on comp. Andybib   Mon Apr 14 2008 07:33 PM
. * * Re: Unusual behaviour on comp. bricatModerator   Mon Apr 14 2008 10:40 PM
. * * Re: Unusual behaviour on comp. Andybib   Tue Apr 15 2008 05:32 AM
. * * Re: Unusual behaviour on comp. bricatModerator   Tue Apr 15 2008 08:44 AM
. * * Re: Unusual behaviour on comp. Andybib   Tue Apr 15 2008 06:54 PM
. * * Re: Unusual behaviour on comp. bricatModerator   Tue Apr 15 2008 11:07 PM
. * * Re: Unusual behaviour on comp. Andybib   Wed Apr 16 2008 12:46 AM
. * * Re: Unusual behaviour on comp. bricatModerator   Wed Apr 16 2008 01:57 AM
. * * Re: Unusual behaviour on comp. Andybib   Wed Apr 16 2008 06:50 PM
. * * Re: Unusual behaviour on comp. bricatModerator   Wed Apr 16 2008 06:54 PM

Extra information
1 registered and 9 anonymous users are browsing this forum.

Moderator:  putasolutions, greysts, bricat, AndrewC, Joe_London, John_McKenna, Mouse, Hello_There, TheFatControlleR, Nanook, Noviciate 


Print Thread
Forum Permissions
      You cannot start new topics
      You cannot reply to topics
      HTML is disabled
      Mark-up is enabled

Rating:
Thread views: 0

Contact Us | Privacy statement Main website
Hitwise Top 10 Award Winner - Jan-Mar 2005

About us | Contact us | Link to us | Terms & Conditions | Privacy Policy
© Copyright IPC Media Limited, All rights reserved