There is no sign of active malware, is the problem still happening ?
Custom CFScript
- Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:
Code:KillAll:: File:: c:\windows\system32\appsetup.exe Folder:: c:\Program Files\LimeWire c:\documents and settings\nora\favorites\shop RegNull:: [HKEY_USERS\.Default\AppEvents\Schemes\Apps\Conf\*ú^\.Current] [HKEY_USERS\LocalService\AppEvents\Schemes\Apps\Conf\*ú^\.Current] [HKEY_USERS\S-1-5-20\AppEvents\Schemes\Apps\Conf\*ú^\.Current] [HKEY_USERS\S-1-5-21-1482476501-1417001333-839522115-1003\AppEvents\Schemes\Apps\Conf\*ú^\.Current] [HKEY_LOCAL_MACHINE\software\Classes\B*D*A*T*u*n*e*r*.*?0ú?0ú?0ú?0\CLSID] [HKEY_LOCAL_MACHINE\software\Classes\B*D*A*T*u*n*e*r*.*?0ú?0ú?0ú?0\CurVer] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\?0ú?0ú?0?0úún0?0?0?0?0?0?0 *?0úú?0] ADS::- Save this as CFScript.txt and place it on your desktop.
- Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
- ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
- When finished, it will produce a log for you. Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.
A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own. This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper