Reply to thread

Message

<blockquote data-quote="Fiery" data-source="post: 91364" data-attributes="member: 9">Download a new copy of TDSSkiller and see if you can run it in normal or safe mode. When TDSSkiller opens, click change parameters , check the box next to Loaded modules . A reboot will be required.After reboot, TDSSKiller will run again. Click Change parameters again and make sure everything is checked.<img src="http://img.photobucket.com/albums/v257/MrChalee/clip.jpg" alt="" class="fr-fic fr-dii fr-draggable " style="" />and click start scan .If a suspicious object is detected, the default action will be Skip, click on Continue. (If it saids TDL4/TDSS file system, select delete)If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue and Reboot now to finish the cleaning process.Post the log after.Then download a new copy of Combofix.Open up Notepad and paste the following:&nbsp;* Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe&nbsp; &nbsp; * At this point, you MUST EXIT ALL BROWSERS NOW before continuing!&nbsp; &nbsp; * You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.&nbsp; &nbsp; * Now use your mouse to drag CFscript.txt on top of ComboFix.exe<img src="http://users.pandora.be/bluepatchy/miekiemoes/images/CFScript.gif" alt="" class="fr-fic fr-dii fr-draggable " style="" />&nbsp; &nbsp; * Follow the prompts.&nbsp; &nbsp; * When it finishes, a log will be produced named c:\combofix.txt&nbsp; &nbsp; * I will ask for this log below</blockquote>

[QUOTE="Fiery, post: 91364, member: 9"] Download a new copy of TDSSkiller and see if you can run it in normal or safe mode. When TDSSkiller opens, click [b] change parameters [/b] , check the box next to [b]Loaded modules [/b]. A reboot will be required. After reboot, TDSSKiller will run again. Click Change parameters again and make sure everything is checked. [img]http://img.photobucket.com/albums/v257/MrChalee/clip.jpg[/img] and click [b]start scan [/b]. If a [b]suspicious object[/b] is detected, the default action will be [b]Skip[/b], click on Continue. (If it saids TDL4/TDSS file system, select [b]delete[/b]) If [b]malicious objects [/b]are found, they will show in the Scan results - Select action for found objects and offer three options. Ensure [b]Cure (default)[/b] is selected, then click [b]Continue[/b] and [b]Reboot now[/b] to finish the cleaning process. Post the log after. Then download a new copy of Combofix. Open up Notepad and paste the following: * Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe * At this point, you MUST EXIT ALL BROWSERS NOW before continuing! * You should have both the ComboFix.exe and CFScript.txt icons on your Desktop. * Now use your mouse to drag CFscript.txt on top of ComboFix.exe [img]http://users.pandora.be/bluepatchy/miekiemoes/images/CFScript.gif[/img] * Follow the prompts. * When it finishes, a log will be produced named c:\combofix.txt * I will ask for this log below [/QUOTE]

Verification