Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
File recovery virus
Message
<blockquote data-quote="Jack" data-source="post: 73377" data-attributes="member: 1"><p>Can you transfer some utilities via an USB stick on the infected computer?If yes,then I'll need the logs from this tools:</p><p></p><p><span style="font-size: 15px">STEP 1 : Run a scan with Combofix</span></p><p style="text-align: center"><span style="font-size: 15px">Please read and follow very carefully the below instructions</span></p><p> </p><p>Download <strong>ComboFix</strong> from one of the following locations: </p><p></p><p><a href="http://download.bleepingcomputer.com/sUBs/ComboFix.exe" target="_blank"><strong>COMBOFIX DOWNLOAD LINK #1</strong></a> <em>(This link will automatically download Combofix on your computer)</em></p><p><a href="http://www.forospyware.com/sUBs/ComboFix.exe" target="_blank"><strong>COMBOFIX DOWNLOAD LINK #2</strong></a> <em>(This link will automatically download Combofix on your computer)</em></p><p>----------------------------------------------------------------</p><p><span style="color: red">VERY IMPORTANT !!! </span>Save ComboFix.exe to your <strong>Desktop </strong> </p><p> </p><p><ul></p><p> <li>Close any open browsers.</li></p><p> <li>Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.</p><p><<strong>>Very Important!</<strong>> Temporarily <<strong>>disable</<strong>> your <<strong>>anti-virus</<strong>>, <<strong>>script blocking</<strong>> and any <<strong>>anti-malware</<strong>> real-time protection <em><<strong>>before</<strong>></em> performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause <em>"unpredictable results"</em>.</li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong> <li><<strong>>WARNING: Combofix will disconnect your machine from the Internet as soon as it starts</<strong>>.Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished. </strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong>If there is no internet connection after running Combofix, then restart your computer to restore back your connection.</li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong></ul></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong>-----------------------------------------------------------------</strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><u><strong>How to run the Combofix scan : </strong></u></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><ol> <li data-xf-list-type="ol"><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong>Double click on <strong>ComboFix.exe</strong> & follow the prompts.</strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></li> <li data-xf-list-type="ol"><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong>Accept the disclaimer and allow to update if it asks</strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></li> <li data-xf-list-type="ol"><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong>When finished, it shall produce a log for you.<strong> <br /> [*]Please include the C:\ComboFix.txt in your next reply.</strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></li> </ol><p></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><span style="color: red">Additional notes:</span></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><span style="color: red"><ol><li> Do not mouse-click Combofix's window while it is running. That may cause it to stall.</li></span></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><span style="color: red"><li> Do not "re-run" Combofix. If you have a problem, reply back for further instructions.</li></span></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><span style="color: red"><li> If after the reboot you get errors about programms being marked for deletion then reboot, that will cure it.</li></ol></span></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><span style="color: red"></span></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><span style="color: red"></span></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><hr /></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><span style="font-size: 15px">STEP 2: Run the Complete Internet Repair utility. </span></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><ol><li>Download <a title="External link" href="http://www.datum-forensics.com/down/comintrep.exe" rel="nofollow external" rel="nofollow">Complete Internet Repair utility</a> to your desktop</li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><li>Unzip all the files to their own folder on the desktop</li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><li>Within the folder double click <<strong>>CIntRep</<strong>></li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><li>Select the following items,then press the GO button.</strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><ul><li>Reset Interent Protocol (TCP/IP)</li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><li>Repair Winsock (Reset Catalog)</li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><li>Renew Internet Connection</li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><li>Flush DNS Resolver Cache</li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><li>Reset Windows Firewall Configuration</li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><li>Reset the default hosts fie</li></ul></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong></li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><li>Restart your computer</li></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong></ol></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><span style="font-size: 15px"><strong>What's next?</strong></span></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><span style="font-size: 15px"></span></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><span style="font-size: 15px">Add the following logs to your next post (You can find <a href="http://malwaretips.com/Thread-How-to-use-the-attachment-system?pid=16072#pid16072" target="_blank"><strong>here</strong></a> details on how to use the Attachment System): </span></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><span style="font-size: 15px">1.Combofix log</span></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p><p><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><strong><span style="font-size: 15px">2.Let me know if you had any problems with the above instructions and also <<strong>>let me know how things are running now!</<strong>></strong></strong></span></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></strong></p></blockquote><p></p>
[QUOTE="Jack, post: 73377, member: 1"] Can you transfer some utilities via an USB stick on the infected computer?If yes,then I'll need the logs from this tools: [SIZE=4]STEP 1 : Run a scan with Combofix[/SIZE] [CENTER][SIZE=4]Please read and follow very carefully the below instructions[/SIZE][/CENTER] Download [b]ComboFix[/b] from one of the following locations: [url=http://download.bleepingcomputer.com/sUBs/ComboFix.exe][b]COMBOFIX DOWNLOAD LINK #1[/b][/url] [i](This link will automatically download Combofix on your computer)[/i] [url=http://www.forospyware.com/sUBs/ComboFix.exe][b]COMBOFIX DOWNLOAD LINK #2[/b][/url] [i](This link will automatically download Combofix on your computer)[/i] ---------------------------------------------------------------- [color=red]VERY IMPORTANT !!! [/color]Save ComboFix.exe to your [b]Desktop [/b] <ul> <li>Close any open browsers.</li> <li>Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix. <[b]>Very Important!</[b]> Temporarily <[b]>disable</[b]> your <[b]>anti-virus</[b]>, <[b]>script blocking</[b]> and any <[b]>anti-malware</[b]> real-time protection <em><[b]>before</[b]></em> performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause <em>"unpredictable results"</em>.</li> <li><[b]>WARNING: Combofix will disconnect your machine from the Internet as soon as it starts</[b]>.Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished. If there is no internet connection after running Combofix, then restart your computer to restore back your connection.</li> </ul> ----------------------------------------------------------------- [u][b]How to run the Combofix scan : [/b][/u] [list=1][*]Double click on [b]ComboFix.exe[/b] & follow the prompts. [*]Accept the disclaimer and allow to update if it asks [*]When finished, it shall produce a log for you.[b] [*]Please include the C:\ComboFix.txt in your next reply.[/b] [/list] [b][color=red]Additional notes: <ol><li> Do not mouse-click Combofix's window while it is running. That may cause it to stall.</li> <li> Do not "re-run" Combofix. If you have a problem, reply back for further instructions.</li> <li> If after the reboot you get errors about programms being marked for deletion then reboot, that will cure it.</li></ol> [/color][/b] <hr /> [SIZE=4]STEP 2: Run the Complete Internet Repair utility. [/SIZE] <ol><li>Download <a title="External link" href="http://www.datum-forensics.com/down/comintrep.exe" rel="nofollow external" rel="nofollow">Complete Internet Repair utility</a> to your desktop</li> <li>Unzip all the files to their own folder on the desktop</li> <li>Within the folder double click <[b]>CIntRep</[b]></li> <li>Select the following items,then press the GO button. <ul><li>Reset Interent Protocol (TCP/IP)</li> <li>Repair Winsock (Reset Catalog)</li> <li>Renew Internet Connection</li> <li>Flush DNS Resolver Cache</li> <li>Reset Windows Firewall Configuration</li> <li>Reset the default hosts fie</li></ul> </li> <li>Restart your computer</li> </ol> [SIZE=4][b]What's next?[/b] Add the following logs to your next post (You can find [url=http://malwaretips.com/Thread-How-to-use-the-attachment-system?pid=16072#pid16072][b]here[/b][/url] details on how to use the Attachment System): 1.Combofix log 2.Let me know if you had any problems with the above instructions and also <[b]>let me know how things are running now!</[b]>[/b][/b][/SIZE][b][b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b][/b] [/QUOTE]
Insert quotes…
Verification
Post reply
Top
