2

OK try this

  1. Please open Notepad
    [*] Click Start , then Run[*]Type notepad .exe in the Run Box.

  2. Now copy/paste the entire content of the codebox below into the Notepad window:


File::
C:\WINDOWS\system32\yaywuvu.dll
C:\WINDOWS\{6D6196E7-5EBD-4F4F-9466-E72126CB61BD}.dat
C:\WINDOWS\{D90693EE-0F69-4672-B6DC-D0C46E4548FF}.dat

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\yaywuvu]

Renv::
<pre>
----a-w         1,694,208 2008-01-09 14:39:20  C:\Program Files\Messenger\msmsgs .exe
----a-w            15,360 2008-01-09 14:39:18  C:\WINDOWS\system32\ctfmon .exe
</pre>

  1. Then in the text file go to FILE > SAVE AS and in the dropdown box select SAVE AS TYPE to ALL FILES

  2. Save the above as CFScript.txt

  3. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

http://users.pandora.be/bluepatchy/miekiemoes/images/CFScript.gif

  1. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
    [*]Combofix.txt [*]A new HijackThis log.