Computer Forums - View Single Post - System restore after a virus, am i still infected? [F]

Mak213 · 07-08-2008, 03:03 PM

Hello Blue,

There are a couple more entries that need to be removed. So 1 more ComboFix script for you to run.

1. Please open Notepad

Click Start, then Run
Type "notepad.exe" in the Run Box.

2. Now copy/paste the entire content of the codebox below into the Notepad window:

Code:

File::
C:\WINDOWS\system32\ijjiSetup.exe
:\WINDOWS\system32\ijjiPlugin2.dll
C:\WINDOWS\iun6002.exe

3. Then in the text file go to FILE => SAVE AS and in the dropdown box select SAVE AS TYPE to ALL FILES

4. Save the above as CFScript.txt

5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

http://users.pandora.be/bluepatchy/m...s/CFScript.gif

5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply

Logs needed in next post:

ComboFix

Cheers,
Mak

07-08-2008, 03:03 PM	#7 (permalink)
Mak213 Commander Super Mod Joker Join Date: Sep 2004 Location: Trotter's Basement Posts: 17,377	Re: System restore after a virus, am i still infected? [P] Hello Blue, There are a couple more entries that need to be removed. So 1 more ComboFix script for you to run. 1. Please open Notepad Click Start, then Run Type "notepad.exe" in the Run Box. 2. Now copy/paste the entire content of the codebox below into the Notepad window: Code: File:: C:\WINDOWS\system32\ijjiSetup.exe :\WINDOWS\system32\ijjiPlugin2.dll C:\WINDOWS\iun6002.exe 3. Then in the text file go to FILE => SAVE AS and in the dropdown box select SAVE AS TYPE to ALL FILES 4. Save the above as CFScript.txt 5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again. http://users.pandora.be/bluepatchy/m...s/CFScript.gif 5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply Logs needed in next post: ComboFix Cheers, Mak __________________ Google...USE IT \| There is a EDIT button. Use It and don't multiple post. \| Image created by CarnageX \| You've been Mak'd!