Win32.TDSS.rtk

[Shaba]

• Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:
  
  

  File::
  d:\windows\system32\UACtmjsjvcdas.dll
  d:\windows\system32\drivers\UACxmcpqkkroc.sys
  
  Folder::
  d:\program files\eMule
  d:\program files\LimeWire
  d:\program files\uTorrent
  d:\documents and settings\Administrator\Application Data\uTorrent
  
  Registry::
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "?Torrent"=-
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
  "SpybotDeletingD4312"=-
  "SpybotDeletingD2453"=-
  "SpybotDeletingD6868"=-
  "SpybotDeletingD6022"=-
  "SpybotDeletingD8544"=-
  "SpybotDeletingD5021"=-
  "SpybotDeletingD3578"=-
  "SpybotDeletingD1113"=-
  "SpybotDeletingD8134"=-
  "SpybotDeletingD7183"=-
  "SpybotDeletingB9485"=-
  "SpybotDeletingB5806"=-
  "SpybotDeletingB9083"=-
  "SpybotDeletingB7376"=-
  "SpybotDeletingB1510"=-
  "SpybotDeletingB2578"=-
  "SpybotDeletingB5007"=-
  "SpybotDeletingB1619"=-
  "SpybotDeletingB92"=-
  "SpybotDeletingB8795"=-

• Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.
  
  
  
• Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
• ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
• When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.