cant access website

Jaffa.

aliEnRIK wrote: »

Ill go through the combofix log proper when ive time

The other option is to uninstall IE8 to revert back to IE7 but that has caused problems on some pcs so you do it at some risk

Here's the link for the uninstall of IE8 http://support.microsoft.com/kb/957700
But note "You cannot uninstall Internet Explorer 7 or Internet Explorer 8 after you install Windows XP Service Pack 3" if thats the case then "you must uninstall SP3 before you can uninstall Internet Explorer 8"

Once you've got it working again you would still be better off using Firefox - it's a much better browser

aliEnRIK

Open notepad and copy/paste the text in RED below

File::
C:\sqmdata10.sqm
C:\sqmdata09.sqm
C:\sqmdata08.sqm
C:\sqmnoopt08.sqm
C:\sqmnoopt07.sqm
C:\sqmdata07.sqm
C:\sqmnoopt06.sqm
c:\documents and settings\All Users\Application Data\wuxacevax.bat
c:\program files\Common Files\ikozevusyl.ban
c:\documents and settings\All Users\Application Data\tisasufer.sys
c:\documents and settings\All Users\Application Data\ucytaca.com
c:\program files\Common Files\ikux.reg
c:\program files\Common Files\fesavel.lib
c:\documents and settings\Sony Vaio\Local Settings\Application Data\bisinafo.bat
c:\documents and settings\Sony Vaio\Application Data\aqij.vbs
c:\program files\Common Files\etynob.dl

Registry::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4 B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{604BB98 A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{684373F B-9CD8-4e47-B990-5A4466C16034}\InprocServer32*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{74554CC D-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7EB537F 9-A916-4339-B91B-DED8E83632C0}\InprocServer32*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{948395E 8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC3ED30 B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE5654C A-EB84-4df9-915B-37E957082D6D}\InprocServer32*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E39C35E 8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EACAFCE 5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8F02AD D-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEE45DE 2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*]

Save this as "CFScript"

Then drag the CFScript into ComboFix.exe as you see in the screenshot below.




This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply

Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.

ayeshasi

im in the middle of doing that... and now my laptop has froze....i mean..cant see the taskbar or anything...just the desktop picture.... \:S
Help

aliEnRIK

reboot and keep pressing F8 to get into safe mode with networking

Attempt a SYSTEM RESTORE

and attempt to reinstall the SONY software (Which has been infected)

ayeshasi

Well i managed to restart the system whilst holding down the power button. Its fine....altho, the sites still arent opening.....i have installed firefox now...in which the sites open :S

Jaffa.

ayeshasi wrote: »

Well i managed to restart the system whilst holding down the power button. Its fine....altho, the sites still arent opening.....i have installed firefox now...in which the sites open :S

Have you tried: Tools > Internet Options > Advanced > reset Internet Explorer settings?

aliEnRIK

Follow Jaffas advice if you want to attempt to go back to IE7

But id make sure your computers clean before doing that personally

To try and fix the problem though ~

Run LSPFIX

then ~

Download HostsXpert
http://www.softpedia.com/get/Security/Security-Related/Hoster.shtml
and then follow the below steps.

* Unzip HostsXpert.zip
* It will create a folder named HostsXpert in whatever folder you extract it to.
* Run HostsXpert.exe by double clicking on it.
* click the Make Writeable? button.
* click Restore Microsoft's Hosts File and then click OK.
* Click the X to exit the program

ayeshasi

Jaffa. wrote: »

Have you tried: Tools > Internet Options > Advanced > reset Internet Explorer settings?

I tried that yestrday but when i tried resetting, an error was showing :S

aliEnRIK

Im off out for most of the day but id suggest a FULL scan with Avira at some point to see if it can find anything

(And I could do with another combofix run just to see whats still there)

tomarola

aliEnRIK wrote: »

reboot and keep pressing F8 to get into safe mode with networking

Attempt a SYSTEM RESTORE

and attempt to reinstall the SONY software (Which has been infected)

Best advice which I recommend