Member Panel


Sponsors and Ads

Noticeboard

[Fixed] Hijackthis! Logs - Shut down Windows posted in the Security & Safety forums; Hello vermillion. Sorry for the delay, I will message Pancake now...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #8  
Old 01-08-2008
Cowburn199's Avatar
Moderator
My PC
 
Join Date: Nov 2005
Location: England - Lancashire
Posts: 1,518
PC Experience: I know a fair amount, always learning
Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page
Send a message via MSN to Cowburn199
Default Re: Shut down Windows

Hello vermillion. Sorry for the delay, I will message Pancake now


__________________
BSOD's - PCHF Rules -Prework
If someone helped you, please consider clicking rate post

  #9  
Old 01-08-2008
Pancake's Avatar
Senior Security Analyst
 
Join Date: Jun 2006
Location: Victoria, Australia
Posts: 3,590
PC Experience: Elite PC Guru
Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page
Default Re: Shut down Windows

Go to Start, then Control Panel and then Add/Remove Programs. Click Remove on any of the following:
CiD Help
CiD Manager
Messenger plus or messenger plus and client
Download Plugin for Internet Explorer
Bitdownload
Zone Media
WinZix
Search Plugin
Bitgrabber
BitRol
Netpumper
Torrent101
W3player
While uninstalling the above, if you're asked for a Verification code, please enter the numbers that appear in the window.
Once done, restart your machine - Important!
Then download http://home.hetnet.nl/~stefsmeenk/deljob.exe Deljob.exe and save it to your desktop.
Doubleclick Deljob.exe to generate a logfile called logit.txt on your desktop.
Post the contents of the logfile in your next reply together with a new HijackThis log.

==============================


Have "Hijack This" fix all the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and Close HJT.

O4 - HKLM\..\Run: [roam slow curb balm] C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Bait cake roam slow\Copy multi.exe
O4 - HKCU\..\Run: [KIND POP] C:\DOKUME~1\MNEB54~1.MN-\ANWEND~1\AXISLESS\DEFAULT THIRD.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOKUME~1/MNEB54~1.MN-/LOK...p_image002.jpg
Reboot...............
====================================
Please copy this page to *Notepad* and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.
It's IMPORTANT to carry out the instructions in the sequence listed below.
1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Open *notepad* and copy/paste the text in the quotebox below into it:

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"KIND POP"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"roam slow curb balm"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\roam slow curb balm]
Save this as CFScript.txt, in the same location as ComboFix.exe which is on the Desktop.


Refering to the picture above, drag CFScript.txt into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt
Please copy and paste the ComboFix.txt along with a fresh HijackThis log in your next reply please.

*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall*


__________________
  • An Australian Member of
  • and
My real name is Eddy

Last edited by Pancake; 01-08-2008 at 10:28 PM.

Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 09:10 PM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top