1. Please open Notepad
- Click Start , then Run
- Type notepad .exe in the Run Box.
2. Now copy/paste the entire content of the codebox below into the Notepad window:
Code:
File::
c:\users\Robbie\AppData\Local\Yluhimijigo.bin
c:\users\Robbie\AppData\Local\Rdolipiduraya.dat
c:\programdata\Symantec\Definitions\SymcData\virusdefs-2.5-e\20100211.002\NAVENG.SYS
c:\programdata\Symantec\Definitions\SymcData\virusdefs-2.5-e\20100211.002\NAVEX15.SYS
c:\windows\Tasks\Norton Security Scan for Robbie.job
Folder::
c:\users\Robbie\AppData\Roaming\BullGuard
c:\programdata\McAfee Security Scan
c:\program files\Common Files\Symantec Shared
Driver::
Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BullGuard"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BullGuard"=-
RegLockDel::
3. Save the above as CFScript.txt
4. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.
![[IMG]](http://users.pandora.be/bluepatchy/miekiemoes/images/CFScript.gif)
5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
- Combofix.txt
- A new HijackThis log.