[Antichrist] [Day of judgment]-I really need help
My PC Hell Forum
November 22, 2008, 05:08:10 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Moving to New Location Soon! Watch out for notification. 14th Dec 2007.
 
   Home   Help Search Calendar Login Register  
Pages: 1 [2]
« previous next »
  Print  
Author Topic: [Antichrist] [Day of judgment]-I really need help  (Read 1615 times)
Essexboy
Administrator
*****
Posts: 899



View Profile WWW
« Reply #15 on: April 17, 2008, 05:51:32 PM »
Did you run the vbs programme and then the registry fix ?
Logged
VISTA
XPsp2
Avast (of course)



http://spaces.msn.com/members/essexboymkn/

 If ignorance is bliss  why aren't more people happy?
amin30b
Contributor
**
Posts: 14


View Profile
« Reply #16 on: April 17, 2008, 05:58:17 PM »
Oh , I forgot run fix.reg again and html loading problem was solved only via vbs file !
Again I can`t run fix.reg file and I receive same error  yquestion
Logged
amin30b
Contributor
**
Posts: 14


View Profile
« Reply #17 on: April 17, 2008, 06:01:50 PM »
This is my fix.reg file :
http://www.savefile.com/files/1510582
Is it true ?
Logged
Essexboy
Administrator
*****
Posts: 899



View Profile WWW
« Reply #18 on: April 18, 2008, 01:35:12 PM »
Looks like it, Lets try a different way

1. Please open Notepad
  • Click Start , then Run
  • Type notepad .exe in the Run Box.
2. Now copy/paste the entire content of the codebox below into the Notepad window:

Code:
Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"blank"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"blank"=-
[HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Policies\ Explorer]
"NoFolderOptions"=0
[HKEY_CURRENT_USER\ Software\ Microsoft\ Internet Explorer\ Main]
"Window Title"=""
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon]
"Shell"="Explorer.exe"
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon]
"Userinit"="%sysdir%\userinit.exe"
[HKEY_CURRENT_USER\ Software\ Microsoft\ Windows NT\ CurrentVersion\ Windows]
"Load"=""
[HKEY_CURRENT_USER\ Software\ Microsoft\ Internet Explorer\ Main]
"Search Page"=""
[HKEY_CURRENT_USER\ Software\ Microsoft\ Internet Explorer\ Main]
"Start Page"=""
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon]
"SFCDisable"=00, 00, 00, 00
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion]
"RegisteredOrganization"=""
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion]
"RegisteredOwner"=""
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon]
"LegalNoticeCaption"=""
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon]
"LegalNoticeText"=""
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"LogonPrompt"=""
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Welcome"=""
[HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Explorer\ Advanced]
"Hidden"=01, 00, 00, 00
[HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Explorer\ Advanced]
ShowSuperHidden"=01, 00, 00, 00

3. Then in the text file go to FILE > SAVE AS and in the dropdown box select SAVE AS TYPE to ALL FILES

4. Save the above as CFScript.txt

5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below.  This will start ComboFix again.




5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
  • Combofix.txt
  • A new HijackThis log.
Logged
VISTA
XPsp2
Avast (of course)



http://spaces.msn.com/members/essexboymkn/

 If ignorance is bliss  why aren't more people happy?
amin30b
Contributor
**
Posts: 14


View Profile
« Reply #19 on: April 18, 2008, 04:26:20 PM »
Wow , this time there is an unusual treatment between Combo-Fix and
my PC . When combo fix starts it would create log file before reboot
system and after loading log.txt file on screen ,suddenly my PC will reboot abnormally !
While when Windows is loading again , it asks me to check hard drives and fix them ,
also in startup appears this message :
The system has recovered from a serious error .
I prefer reinstall Windows on my PC , what do you offer Essexboy ?
Logged
Essexboy
Administrator
*****
Posts: 899



View Profile WWW
« Reply #20 on: April 18, 2008, 04:47:22 PM »
Has the system returned to normal (but still with the box) .  What is the status on re-boot ?

All that combofix did was replace the default registry values
Logged
VISTA
XPsp2
Avast (of course)



http://spaces.msn.com/members/essexboymkn/

 If ignorance is bliss  why aren't more people happy?
amin30b
Contributor
**
Posts: 14


View Profile
« Reply #21 on: April 18, 2008, 04:55:08 PM »
Not really , avast antivirus doesn`t load in startup but it seems that it is active on pc because I couldn`t run some exe files like keygen files .
Yes system is normal after new manually reboot but still with the box .
Logged
Essexboy
Administrator
*****
Posts: 899



View Profile WWW
« Reply #22 on: April 18, 2008, 04:56:15 PM »
Would you be happy manually amending your registry ?
Logged
VISTA
XPsp2
Avast (of course)



http://spaces.msn.com/members/essexboymkn/

 If ignorance is bliss  why aren't more people happy?
amin30b
Contributor
**
Posts: 14


View Profile
« Reply #23 on: April 18, 2008, 04:59:18 PM »
Yes , I would, but without unusual reboot action  ywink
Logged
Essexboy
Administrator
*****
Posts: 899



View Profile WWW
« Reply #24 on: April 18, 2008, 05:13:09 PM »
OK open regedit and navigate to the following values in the key described

HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\Winlogon

"RegisteredOrganization"

"RegisteredOwner"

"LegalNoticeCaption"

"LegalNoticeText"

"LogonPrompt"

"Welcome"

Open the values and delete the text - do not delete the value itself

i.e.  "RegisteredOwner"  "antichrist"
becomes "RegisteredOwner"

To open a value double click it and you will get the following - clear the data in the box and click OK
Logged
VISTA
XPsp2
Avast (of course)



http://spaces.msn.com/members/essexboymkn/

 If ignorance is bliss  why aren't more people happy?
Essexboy
Administrator
*****
Posts: 899



View Profile WWW
« Reply #25 on: April 18, 2008, 05:16:31 PM »
Slight boboo on my part

"RegisteredOrganization"

"RegisteredOwner"

Are in HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion
Logged
VISTA
XPsp2
Avast (of course)



http://spaces.msn.com/members/essexboymkn/

 If ignorance is bliss  why aren't more people happy?
Pages: 1 [2]
  Print  
« previous next »
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.2 | SMF © 2006-2007, Simple Machines LLC Valid XHTML 1.0! Valid CSS!