Open notepad and copy/paste the text present inside the code box below:
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
Code:
Folder::
c:\users\Marjorie\AppData\Roaming\Fowacye
c:\users\Marjorie\AppData\Local\Omics
Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Msmdmwbs"=-
"Omics"=-
"Zyivfuubd"=-
File::
c:\users\Marjorie\Apps\NT\msapps.exe
ClearJavaCache::
Save this as
CFScript.txt
Close all browser windows and refering to the picture above.
Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will will re-run. When finished, it will produce a log for you.
Attach the contents of the log in your next reply. (typical location: C:\
ComboFix.txt )