Infected w/Trojan, Browser Highjacked

Did you disable AVG using msconfig?

As far as running, No more browser redirects.

Did you disable AVG using msconfig?

No, was i suppose to? I didn't know I was suppose to.

I wouldn't even know how to disable it that way.

We'll get rid of it this way


Copy/paste the text in the Codebox below into notepad:

Here's how to do that:
Click Start > Run type Notepad click OK.
This will open an empty notepad file:

Take your mouse, and place your cursor at the beginning of the text in the box below, then click and hold the left mouse button, while pulling your mouse over the text. This should highlight the text. Now release the left mouse button. Now, with the cursor over the highlighted text, right click the mouse for options, and select 'copy'. Now over the empty Notepad box, right click your mouse again, and select 'paste' and you will have copied and pasted the text.

File::
c:\windows\system32\avgrsstx.dll

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"avg8wd"=- 
"avg8emc"=-

Save this file to your desktop, Save this as "CFScript"

Here's how to do that:
1.Click File;
2.Click Save As… Change the directory to your desktop;
3.Change the Save as type to "All Files";
4.Type in the file name: CFScript
5.Click Save …


[external image: Posted Image]

Drag CFScript.txt into ComboFix.exe


Then post the results log using Copy / Paste

Combofix is running. As I've expected it gave the AVG real time scanner warning.

Combofix is running. As I've expected it gave the AVG real time scanner warning.

Removing that .dll should stop that.

I'm getting readt to eat so I'll be away for about 30mins

What?!!!… You've got to be kidding me. Eating is for wussies. :-) JK What's for dinner?

Steak and Mac / Cheese

No veggies?

No veggies?

I have to fix my own. No room for veggies tonite

I hate it how the veggies take up valuable plate real estate.

Combofix still running?

Was it suppose to be running? D'oh!!! yup…Preparing log report