[Antichrist] [Day of judgment]-I really need help

Got a virus? Need to know about removing spyware?. Or how to make your PC Secure? Ask in here.



User avatar
Essexboy
Administrator
Administrator
Posts: 903
Joined: Wed Sep 14, 2005 11:20 am
Location: Helston - Cornwall
Contact:

Re: [Antichrist] [Day of judgment]-I really need help

Post by Essexboy » Thu Apr 17, 2008 9:51 pm

Did you run the vbs programme and then the registry fix ?
VISTA
XPsp2
Avast (of course)
Image


http://spaces.msn.com/members/essexboymkn/

If ignorance is bliss  why aren't more people happy?

amin30b
Contributor
Contributor
Posts: 14
Joined: Tue Apr 15, 2008 6:51 pm

Re: [Antichrist] [Day of judgment]-I really need help

Post by amin30b » Thu Apr 17, 2008 9:58 pm

Oh , I forgot run fix.reg again and html loading problem was solved only via vbs file !
Again I can`t run fix.reg file and I receive same error  :yquestion:

amin30b
Contributor
Contributor
Posts: 14
Joined: Tue Apr 15, 2008 6:51 pm

Re: [Antichrist] [Day of judgment]-I really need help

Post by amin30b » Thu Apr 17, 2008 10:01 pm

This is my fix.reg file :
http://www.savefile.com/files/1510582
Is it true ?

User avatar
Essexboy
Administrator
Administrator
Posts: 903
Joined: Wed Sep 14, 2005 11:20 am
Location: Helston - Cornwall
Contact:

Re: [Antichrist] [Day of judgment]-I really need help

Post by Essexboy » Fri Apr 18, 2008 5:35 pm

Looks like it, Lets try a different way

1. Please open Notepad
  • Click Start , then Run
  • Type notepad .exe in the Run Box.
2. Now copy/paste the entire content of the codebox below into the Notepad window:

Code: Select all

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"blank"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"blank"=-
[HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Policies\ Explorer]
"NoFolderOptions"=0
[HKEY_CURRENT_USER\ Software\ Microsoft\ Internet Explorer\ Main]
"Window Title"=""
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon]
"Shell"="Explorer.exe"
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon]
"Userinit"="%sysdir%\userinit.exe"
[HKEY_CURRENT_USER\ Software\ Microsoft\ Windows NT\ CurrentVersion\ Windows]
"Load"=""
[HKEY_CURRENT_USER\ Software\ Microsoft\ Internet Explorer\ Main]
"Search Page"=""
[HKEY_CURRENT_USER\ Software\ Microsoft\ Internet Explorer\ Main]
"Start Page"=""
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon]
"SFCDisable"=00, 00, 00, 00
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion]
"RegisteredOrganization"=""
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion]
"RegisteredOwner"=""
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon]
"LegalNoticeCaption"=""
[HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon]
"LegalNoticeText"=""
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"LogonPrompt"=""
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Welcome"=""
[HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Explorer\ Advanced]
"Hidden"=01, 00, 00, 00
[HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Explorer\ Advanced]
ShowSuperHidden"=01, 00, 00, 00
3. Then in the text file go to FILE > SAVE AS and in the dropdown box select SAVE AS TYPE to ALL FILES

4. Save the above as CFScript.txt

5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below.  This will start ComboFix again.

Image


5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
  • Combofix.txt
  • A new HijackThis log.
VISTA
XPsp2
Avast (of course)
Image


http://spaces.msn.com/members/essexboymkn/

If ignorance is bliss  why aren't more people happy?

amin30b
Contributor
Contributor
Posts: 14
Joined: Tue Apr 15, 2008 6:51 pm

Re: [Antichrist] [Day of judgment]-I really need help

Post by amin30b » Fri Apr 18, 2008 8:26 pm

Wow , this time there is an unusual treatment between Combo-Fix and
my PC . When combo fix starts it would create log file before reboot
system and after loading log.txt file on screen ,suddenly my PC will reboot abnormally ! :dohhh:
While when Windows is loading again , it asks me to check hard drives and fix them ,
also in startup appears this message :
The system has recovered from a serious error .
I prefer reinstall Windows on my PC , what do you offer Essexboy ?

User avatar
Essexboy
Administrator
Administrator
Posts: 903
Joined: Wed Sep 14, 2005 11:20 am
Location: Helston - Cornwall
Contact:

Re: [Antichrist] [Day of judgment]-I really need help

Post by Essexboy » Fri Apr 18, 2008 8:47 pm

Has the system returned to normal (but still with the box) .  What is the status on re-boot ?

All that combofix did was replace the default registry values
VISTA
XPsp2
Avast (of course)
Image


http://spaces.msn.com/members/essexboymkn/

If ignorance is bliss  why aren't more people happy?

amin30b
Contributor
Contributor
Posts: 14
Joined: Tue Apr 15, 2008 6:51 pm

Re: [Antichrist] [Day of judgment]-I really need help

Post by amin30b » Fri Apr 18, 2008 8:55 pm

Not really , avast antivirus doesn`t load in startup but it seems that it is active on pc because I couldn`t run some exe files like keygen files .
Yes system is normal after new manually reboot but still with the box .

User avatar
Essexboy
Administrator
Administrator
Posts: 903
Joined: Wed Sep 14, 2005 11:20 am
Location: Helston - Cornwall
Contact:

Re: [Antichrist] [Day of judgment]-I really need help

Post by Essexboy » Fri Apr 18, 2008 8:56 pm

Would you be happy manually amending your registry ?
VISTA
XPsp2
Avast (of course)
Image


http://spaces.msn.com/members/essexboymkn/

If ignorance is bliss  why aren't more people happy?

amin30b
Contributor
Contributor
Posts: 14
Joined: Tue Apr 15, 2008 6:51 pm

Re: [Antichrist] [Day of judgment]-I really need help

Post by amin30b » Fri Apr 18, 2008 8:59 pm

Yes , I would, but without unusual reboot action  :ywink:

User avatar
Essexboy
Administrator
Administrator
Posts: 903
Joined: Wed Sep 14, 2005 11:20 am
Location: Helston - Cornwall
Contact:

Re: [Antichrist] [Day of judgment]-I really need help

Post by Essexboy » Fri Apr 18, 2008 9:13 pm

OK open regedit and navigate to the following values in the key described

HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\Winlogon

"RegisteredOrganization"

"RegisteredOwner"

"LegalNoticeCaption"

"LegalNoticeText"

"LogonPrompt"

"Welcome"

Open the values and delete the text - do not delete the value itself

i.e.  "RegisteredOwner"  "antichrist"
becomes "RegisteredOwner"

To open a value double click it and you will get the following - clear the data in the box and click OK
Image
VISTA
XPsp2
Avast (of course)
Image


http://spaces.msn.com/members/essexboymkn/

If ignorance is bliss  why aren't more people happy?

User avatar
Essexboy
Administrator
Administrator
Posts: 903
Joined: Wed Sep 14, 2005 11:20 am
Location: Helston - Cornwall
Contact:

Re: [Antichrist] [Day of judgment]-I really need help

Post by Essexboy » Fri Apr 18, 2008 9:16 pm

Slight boboo on my part

"RegisteredOrganization"

"RegisteredOwner"

Are in HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion
VISTA
XPsp2
Avast (of course)
Image


http://spaces.msn.com/members/essexboymkn/

If ignorance is bliss  why aren't more people happy?

Post Reply