Now open a new notepad file.
Input this into the notepad file:
KILLALL::
Driver::
mrtRate
File::
c:\windows\1694zs5y2.bin
c:\windows\~DFED5D.tmp
c:\windows\~DFC45A.tmp
Folder::
c:\documents and settings\All Users\Application Data\Napster
c:\program files\Napster
Registry::
[-HKLM\~\startupfolder\C:^Documents and Settings^Owner^Start Menu^Programs^Startup^spamsubtract.lnk]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32"=-
Save this as CFScript.txt, save it to your desktop also.
Then drag and drop CFScript.txt into combofix as seen below:
This will open combofix again, agree to it's terms and allow it to run.
It may want to reboot after it's done. (It will warn you if it wants to)
Post the resulting log back here.
............................................................................................Site Admin / Security AdministratorVirus Removal ~
OS Support ~
Have we helped you? Help us! ~
GeekChat - Please PM me if I fail to respond within 24hrs.