Member Panel

mark_frontoza

im mark first time here. problem in Win32/NSAnti... AVG detect tc5tvz.dll, Trojan horse generic9.BFBN LOCATION c:\windows\system32\fool0.dll, trojan horse dropper.aagentr.HBH location c:\windows\system32\ieso1.dll and last is virus identified Win32/NSAnti.H location D:\l2quk.exe all this moved to vault but keeps appearing and i can' open my Hard disk. i only open my hard disk when i click my document then browse. pls help

Pancake

Please copy and paste logs rather that attatch them..thanks

We need to install your Recovery Console first.
Go to Microsoft's website => How to obtain Windows XP Setup boot disks
Select the download that's appropriate for your Operating System

Download the file & save it as its originally named, next to ComboFix.exe.

Now close all open windows and programs, then drag the setup package onto ComboFix.exe and drop it. Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console. When complete, a log named CF_RC.txt will open. Please post the contents of that log.
===================================
Please copy this page to *Notepad* and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.
It's IMPORTANT to carry out the instructions in the sequence listed below.
1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Open *notepad* and copy/paste the text in the quotebox below into it:

Killall::

File::
C:\WINDOWS\system32\fool1.dll
C:\vyp2tbt.exe
C:\WINDOWS\system32\kxvo.exe
F:\oufddh.exe
F:\l2quk.exe

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"kxva"=-
[-HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{38fbae84-dce9-11dc-a583-000f3d4bddf3}]
[-HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{603e76d6-dbd2-11dc-a573-000f3d4bddf3}]

Save this as CFScript.txt, in the same location as ComboFix.exe which is on the Desktop.

Refering to the picture above, drag CFScript.txt into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt
Please copy and paste the ComboFix.txt along with a fresh HijackThis log in your next reply please.

*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall*

Member Panel

Sponsors and Ads

Live Tag Cloud