On completion of this run please go to normal mode and let me know what problems you still have
1. Please
open Notepad- Click Start , then Run
- Type notepad .exe in the Run Box.
2. Now
copy/paste the entire content of the codebox below into the Notepad window:
Fcopy::
c:\windows\ServicePackFiles\i386\user32.dll|c:\windows\system32\user32.dll
c:\windows\ServicePackFiles\i386\user32.dll|c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
c:\windows\ServicePackFiles\i386\user32.dll|c:\windows\$NtServicePackUninstall$\user32.dll
c:\windows\ServicePackFiles\i386\user32.dll|c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
c:\windows\ServicePackFiles\i386\user32.dll|c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
c:\windows\ServicePackFiles\i386\user32.dll|c:\windows\$NtUninstallKB925902$\user32.dll
c:\windows\ServicePackFiles\i386\user32.dll|c:\windows\$NtUninstallKB890859$\user32.dll
3. Then in the text file go to
FILE > SAVE AS and in the dropdown box select
SAVE AS TYPE to
ALL FILES 4.
Save the above as
CFScript.txt5. Then
drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.
6. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
- Combofix.txt
- A new OTListit log.