techpro5238
In Runtime
- Messages
- 451
Re: Explorer.exe CRASHES INSTANTLY =( [P]
Step1 | ComboFix CFScript
1. Please open Notepad
3. Then in the text file go to FILE => SAVE AS and in the dropdown box select SAVE AS TYPE to ALL FILES
4. Save the above as CFScript.txt
5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.
5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply
Step2 | Hijackthis Entries
Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below (if they exist).
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKCU\..\Run: [Wznjihhn] "C:\Documents and Settings\Owner\Application Data\??sks\m?config.exe"
O20 - AppInit_DLLs: dfcotxca.dll jwugkmxs.dll
Now close all windows other than HiJackThis, then click Fix Checked.
Logs Required In Next Post
-------------------------------
ComboFix CFScript Log
New Hijackthis Log
Step1 | ComboFix CFScript
1. Please open Notepad
- Click Start, then Run
- Type "notepad.exe" in the Run Box.
Code:
KillAll::
Look::
C:\Documents and Settings\Owner\Application Data\ijjigame
File::
C:\WINDOWS\imsins.BAK
C:\Program Files\Patcher.log
C:\Program Files\Patcher.dat
C:\Program Files\tnkrxgnb.$$$
C:\Program Files\Patcher.info
C:\Program Files\exizcmih.$$$
C:\Program Files\eawkrejd.$$$
C:\Program Files\OdinMS20080416154221.dmp
C:\Program Files\OdinMS20080416.LOG
C:\Program Files\OdinMS20080416154053.dmp
C:\Program Files\OdinMS20080410.LOG
C:\Program Files\OdinMS20080410154815.dmp
C:\Program Files\Version.info
C:\WINDOWS\system32\2508530E9B.dll
C:\WINDOWS\system32\ps2.exe
C:\WINDOWS\system32\dfcotxca.dll
c:\docume~1\owner\applic~1\chinup~1\01 1 drive.exe
C:\WINDOWS\system32\jwugkmxs.dll
C:\WINDOWS\Tasks\ErrorSmart Scheduled Scan.job
C:\WINDOWS\Tasks\AE74CCC291AB7D8A.job
Folder::
C:\Documents and Settings\Owner\Application Data\??sks
C:\Program Files\Common Files\SpyGuardPro
C:\Program Files\ErrorSmart
C:\VundoFix Backups
Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Wznjihhn"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PS2"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"Salestart"=-
"ugcw"=-
4. Save the above as CFScript.txt
5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.
5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply
Step2 | Hijackthis Entries
Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below (if they exist).
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKCU\..\Run: [Wznjihhn] "C:\Documents and Settings\Owner\Application Data\??sks\m?config.exe"
O20 - AppInit_DLLs: dfcotxca.dll jwugkmxs.dll
Now close all windows other than HiJackThis, then click Fix Checked.
Logs Required In Next Post
-------------------------------
ComboFix CFScript Log
New Hijackthis Log