*** Please, upload following files to:
VirusTotal - Free Online Virus and Malware Scan for security check (post results):
-
wdshsm.exe located at
c:\users\celina
*** 1. Please
open Notepad- Click Start , then Run
- Type notepad .exe in the Run Box.
2. Now
copy/paste the entire content of the codebox below into the Notepad window:
Quote:
File::
c:\users\celina\AppData\Loca l\Temp\g6pehzm3c.exe
Folder::
Driver::
Registry::
[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\run-]
"uidenhiufgsduiazghs"=-
|
3.
Save the above as
CFScript.txt
4. Then
drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.
5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
- Combofix.txt
- A new HijackThis log.
*** There is no antivirus installed, and some Norton's leftovers, so after you're done with Combofix...
1. Download, and run
Norton Removal Tool:
Download and run the Norton Removal Tool
2. Download, and install one of these:
- Avast! free antivirus:
Download FREE antivirus software - avast! Home Edition
- Avira free antivirus:
Download Free Antivirus Products
- free PC Tools Firewall Plus:
PC Tools Firewall Plus - Free Firewall Download
- free Comodo Internet Security (firewall + AV):
Firewall and AntiVirus Free Software Download from Comodo
NOTE. During installation, Comodo will also allow you to install AV only, or firewall only, if you prefer to combine one Comodo product with some other product.
If you decide to install Avast, or Avira, make sure, Windows firewall is turned
on, or use PC Tools Firewall Plus.
If you decide to install Comodo, make sure, Windows firewall is turned
off.
IMPORTANT! Make sure, you use only ONE antivirus, and ONE firewall.
After installing, update the program, and run full scan.
Post another HJT log.