Is this it?
That's the one. Thanks=====================================
C:\Program Files\1bomb.ini
Do you know what this program is for?====================================
Please read here for more information about
WildTangent. Your choice if you want to remove it or not.
If you choose to follow my advice, please follow these instructions.
Go to
Start > Control Panel > Add/Remove Programs and remove the following programs.
•
WildTangent Web Driver (or anything else with the name WildTangent.)
I suspect that WildGames is one of these programs since they come from the same site.===================================================
Please go to
Jotti's malware scan(If more than one file needs scanned they must be done separately and logs posted for each one)* Copy the file path in the below Code box:
C:\WINDOWS\system32\drivers\rewac.sys
C:\WINDOWS\system32\mfc45.dll
* At the upload site, click once inside the window next to
Browse.
* Press
Ctrl+V on the keyboard (both at the same time) to paste the file path into the window.
* Next click
Submit file* Your file will possibly be entered into a queue which normally takes less than a minute to clear.
* This will perform a scan across multiple different virus scanning engines.
*
Important: Wait for all of the scanning engines to complete.
*
Once the scan is finished, Copy and then Paste the link in the address bar into your next reply.
==================================
Re-running ComboFix to remove infections:
- Close any open browsers.
- Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
- Open notepad and copy/paste the text in the quotebox below into it:
KillAll::
DDS::
FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=WBR&o=13993&locale=en_US&q=
File::
C:\WINDOWS\system32\drivers\cxxqtr.sys
C:\WINDOWS\system32\drivers\sdfsaevy.sys
C:\found.000
Folder::
C:\found.000
DirLook::
C:\3399b69f05089dbfd00560f2
Driver::
STK017W2.sys
- Save this as CFScript.txt, in the same location as ComboFix.exe
- Referring to the picture above, drag CFScript into ComboFix.exe
- When finished, it shall produce a log for you at C:\ComboFix.txt
- Please post the contents of the log in your next reply.
==================================
Download
Security Check by screen317 from one of the following links and save it to your desktop.
Link 1Link 2* Unzip
SecurityCheck.zip and a folder named
Security Check should appear.
* Open the
Security Check folder and double-click
Security Check.bat* Follow the on-screen instructions inside of the black box.
* A
Notepad document should open automatically called
checkup.txt* Post the contents of that document in your next reply.
Note: If a security program requests permission from
dig.exe to access the Internet, allow it to do so.
