[Closed] Avast Trojan Virus - I need help please!

Hi Tymaca, Are you having problems?

Hi! Yes, I am having trouble. I have dl combofix 3 times and I don't know how to dl it and save it to my desktop. So when i click on it to run it, it automatically runs on it's own and I am unable to go into a notepad feature. I am confused! Tymaca

Hi Tymaca,

No problem. Let's see if i can talk you through this.

If you have combofix.exe on your desktop, please delete it.

To download a new copy to your desktop

• Click the link below
  Combofix
• A box with Opening Combofix.exe will popup, click Save File
• On the next window that opens, make sure that the box at the top Save in is set to desktop
• click save

Combofix.exe should now be on your desktop.

Do no click on combofix.exe to run. Dragging and dropping the CFScript.txt onto will cause it to run.

I'll give you the instructions again so you don't have to go looking for them

To disable Avast's resident scanner

• right click the "a" icon near the clock
• highlite pause provider
• click standard shield

Now you are ready to make the CFSript.txt

Open a new Notepad session

• Click the Start button, click run
• in the run box type notepad
• click ok
• In the notepad, Click "Format" and be certain that Word Wrap is not checked.
  
• Copy and paste all the text in the code box below into the Notepad.
  Do Not copy the word CODE

http://forums.whatthetech.com/Avast_Trojan_Virus_I_need_help_please_t99489.html

KillAll::

Collect::[4]
c:\windows\System32\work.ini

File::
c:\windows\Tasks\Norton Security Scan for tymaca.job

Folder::
c:\program files\Common Files\Symantec Shared
c:\program files\Norton Security Scan
c:\windows\tmpie

In the notepad

• Click File, Save as…, and set the Save in to your Desktop
• In the filename box, type (including quotation marks) as the filename: "CFScript.txt"
• Click save

Using your mouse left button, drag the new file CFscript.txt and drop it on the ComboFix.exe icon as shown below.

This will start ComboFix again.Close all browser/windows first.

**Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

[external image: Posted Image]

**Note**

When CF finishes running, the ComboFix log will open along with a message box–do not be alarmed. With the above script, ComboFix will capture files to submit for analysis.

• Ensure you are connected to the internet and click OK on the message box.

Please post back wth the combofix log and a new HJT log.

If you have any more problems, please do not hesitate to post back.

Thanks

Hi Tymaca, Still with us? Please tell me exactly what you are having problems with. We have other ways of accomplishing what we are trying to do. Thanks

Due to inactivity this topic will be closed. If you need help please start a new thread and post a new HJT log