thanks, pancake.....much appreciated.

__________________

M.C.S.A.
M.C.P. - MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall

But still, what do I do about the blue screen of death when I run CFScript in combofix?

wait for pancake; he's the guy who taught me what I know, so obviously I'll defer to him.

__________________

M.C.S.A.
M.C.P. - MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall

Did you get a log from the last Combofix.

__________________

• An Australian Member of
• 
• and
• 

No, not with the last one. I ran it and it just blue screened.

Can you just do another scan with Combofix and post its log please...

__________________

• An Australian Member of
• 
• and
• 

Ugh... don't be angry at me or anything but Combofix has decided it doesn't want to work again. It just sticks at the "preparing to run" screen.

But now, what we have done has practically fixed my computer anyway. Windows explorer doesn't throw a fit when I open it and there is no apparent evidence that the virus still lingers. If you still want to carry on with what we're doing now that's fine. I just thought I'd let you know that the problem is pretty much fixed.

Ok.Let call a halt to it and come back if you have any more problems...


This will clear away any of the files and folders that were created by ComboFix.
Go to :
Start > Run then copy and paste the following highlighted text below and click OK.
Now that you are clean,and If you wish to do so, here are a few things that you can do that will help keep your computer a bit more clean and secure..they can be done at your leisure.
Download and scan with CCleaner from CCleaner - Download
1. Starting with v1.27.260, CCleaner - Download installs the Yahoo Toolbar as an option which IS checkmarked by default during the installation. IF you do NOT want it, REMOVE the checkmark when provided with the option OR download the toolbar-free Basic or Slim versions instead of the Standard Build.
2. Before first use, select Options > Advanced and UNCHECK "Only delete files in Windows Temp folder older than 48 hours"
3. Then select the items you wish to clean up.
In the Windows Tab:
• Clean all entries in the "Internet Explorer" section except Cookies.
• Clean all the entries in the "Windows Explorer" section.
• Clean all entries in the "System" section.
• Clean all entries in the "Advanced" section.
• Clean any others that you choose.
In the Applications Tab:
• Clean all except cookies in the Firefox/Mozilla section if you use it.
• Clean all in the Opera section if you use it.
• Clean Sun Java in the Internet Section.
• Clean any others that you choose.
4. Click the "Run Cleaner" button.
5. A pop up box will appear advising this process will permanently delete files from your system.
6. Click "OK" and it will scan and clean your system.
7. Click "exit" when done.
__________________

__________________

• An Australian Member of
• 
• and
• 

Thanks, Pancake and thanks, valis. You've both been wonderful and I appreciate your services.

I think this thread can be marked as fixed now.

thanks again, pancake....much appreciated.

marking as fixed.

__________________

M.C.S.A.
M.C.P. - MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall