hello,how are you sir? i am sending you the report here as generated by the software. this is my brother’s laptop and it has the problem with the MSN in that it sends files (as mentioned in the website http://www.xdelbox.com/tag/msn
Please read this Combofix tutorial before continuing, then follow the instructions below.
Download ComboFix from Here to your Desktop. (If you already have ComboFix, please delete it and download this new version).
When asked to “Save As” save Combofix.exe as Combo-Fix.exe
Now physically disconnect from the internet and STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields)
Double click combofix.exe and follow the prompts.
Note: Do not mouseclick combofix’s window while its running. That may cause it to stall
OK, please carry out the following:
1. Please open Notepad
Click Start , then Run
Type notepad .exe in the Run Box.
2. Now copy/paste the entire content of the codebox below into the Notepad window:
c:\windows\system32\kidveudbkb.exe
c:\windows\system32\yag.exe
c:\windows\system32\l.exe
c:\windows\msnlogm.exe
c:\windows\system32\oilszlefr.exe
c:\windows\vfexxy.exe
c:\windows\regsrv64d.exe
c:\windows\nvdispdrv.exe
c:\windows\system32\a6f382e7.exe
c:\windows\system32\irsfrxlbn.exe
Driver::
25E1509
kcay4yoeywzxdaj
Registry::
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
“yag”=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
“kidveudbkb”=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
“l”=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
“msnsyslog”=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
“oilszlefr”=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
“SSLDyn”=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
“RegSrv64D”=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
“NVDispDrv”=-
3. Save the above as CFScript.txt
4. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below.
5. reboot computer , (in case it asks to reboot)
if that’s not work ,please email me at egomoo#gmail.com
download SREng:
http://www.kztechs.com/sreng/sreng2.zip
Extract it to the Desktop
Double click SREng.exe to run it
Select: Smart Scan
Then, click the [Scan] buttonWhen finished, click on the [Save Reports] button
Save the log to the Desktop,and send me a email with the log as Attachment.mailto:egomoo#gmail.comI would be glad to help you to removal this worm.
