Quote:

---

Killall::

File::
C:\WINDOWS\system32\lnhvxrwh.exe
C:\WINDOWS\system32\uoivvaed.dll
C:\WINDOWS\system32\psomlciv.dll
C:\WINDOWS\system32\yukgarlk.dll
C:\WINDOWS\system32\cfbirrqv.dll

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CORN KNOB CHIN ONLINE]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Else Barb Log That]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Face Way]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\memo site kind that]

---

Save this as CFScript.txt, in the same location as ComboFix.exe which is on the Desktop.




Refering to the picture above, drag CFScript.txt into ComboFix.exe


When finished, it shall produce a log for you at C:\ComboFix.txt

Please copy and paste the ComboFix.txt along with a fresh HijackThis log in your next reply please.


*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall.Altering this script in any way could damage your computer*

--------------------

Post Extras