I am putting the logs that I downloaded.
#1
Posted 11 October 2009 - 10:24 PM
Hi, Not able to run or install malware bytes. Please help. I alreayd run combo box also.
I am putting the logs that I downloaded.
I am putting the logs that I downloaded.
#2
Posted 14 October 2009 - 02:12 PM
Hi,
* Open notepad - don't use any other texteditor than notepad or the script will fail.
Copy/paste the text in the quotebox below into notepad:
Save this as txtfile CFScript
Then drag the CFScript into ComboFix.exe as you see in the screenshot below.

This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply.
* Open notepad - don't use any other texteditor than notepad or the script will fail.
Copy/paste the text in the quotebox below into notepad:
Quote
File::
c:\windows\system32\fosajugu.dll
c:\windows\system32\jimarofi.dll
c:\windows\system32\kodatewe.exe
c:\windows\system32\legadaza.dll
c:\windows\system32\ravebavi.dll
c:\windows\system32\yoharaje.dll
c:\windows\system32\yowokifo.dll
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8bc215be-cbbe-4e12-aa9a-bbf00b9e63be}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=-
"AppInit_DLLs"=""
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Notification Packages"=hex(7):73,63,65,63,6c,69,00,00
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\lsass.exe"=-
c:\windows\system32\fosajugu.dll
c:\windows\system32\jimarofi.dll
c:\windows\system32\kodatewe.exe
c:\windows\system32\legadaza.dll
c:\windows\system32\ravebavi.dll
c:\windows\system32\yoharaje.dll
c:\windows\system32\yowokifo.dll
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8bc215be-cbbe-4e12-aa9a-bbf00b9e63be}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=-
"AppInit_DLLs"=""
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Notification Packages"=hex(7):73,63,65,63,6c,69,00,00
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\lsass.exe"=-
Save this as txtfile CFScript
Then drag the CFScript into ComboFix.exe as you see in the screenshot below.

This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply.
#3
Posted 22 October 2009 - 06:36 PM
Due to the lack of feedback, this Topic is closed.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.
Everyone else please begin a New Topic.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.
Everyone else please begin a New Topic.
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
Sign In
Create Account
This topic is locked

Back to top









