Blind Dragon
Posts: 3,774 +4
Run CFScript
Open notepad and copy/paste the text in the code box below into it:
NOTE* make sure to only highlight and copy what is inside the quote box nothing out side of it.
Also ..
Pay particular attention to this :-
Make sure the word File:: is on the first line of the text file you save (no blank line above it, & no space in front of it)
Save this as CFScript.txt
Then drag the CFScript.txt into ComboFix.exe as you see in the screenshot below.
This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply
Open notepad and copy/paste the text in the code box below into it:
NOTE* make sure to only highlight and copy what is inside the quote box nothing out side of it.
Also ..
Pay particular attention to this :-
Make sure the word File:: is on the first line of the text file you save (no blank line above it, & no space in front of it)
File::
C:\WINDOWS\system32\jftiwvxd.ini
C:\zguicfgw.dat
C:\Documents and Settings\Best Buy\zguicfgw.dat
C:\WINDOWS\pss\MyWebSearch Email Plugin.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk
C:\WINDOWS\pss\MyWebSearch Email Plugin.lnkStartup
C:\Documents and Settings\Best Buy\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk
Folder::
C:\Program Files\Java\jre1.6.0_04
C:\Documents and Settings\All Users\Application Data\Viewpoint
Driver::
C:\DOCUME~1\BESTBU~1\LOCALS~1\Temp\asbp2poa.sys
C:\WINDOWS\System32\drivers\dqaohaqg.sys
C:\DOCUME~1\BESTBU~1\LOCALS~1\Temp\osymids.sys
C:\DOCUME~1\BESTBU~1\LOCALS~1\Temp\whidclas.sys
Registry::
[-HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^MyWebSearch Email Plugin.lnk]
[-HKLM\~\startupfolder\C:^Documents and Settings^Best Buy^Start Menu^Programs^Startup^MyWebSearch Email Plugin.lnk]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
Save this as CFScript.txt
Then drag the CFScript.txt into ComboFix.exe as you see in the screenshot below.
This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply