Jump to content

Infected


dhrock

Recommended Posts

  • Replies 114
  • Created
  • Last Reply

Top Posters In This Topic

mRun: [synchronEyes 7.0 Help Service] c:\program files\synchroneyes student 7.0\SynchronEyesClient.exe

OK. I need you to tell me about this computer.

I have only seen this used on Student computers that are owned by a school district.

Is this "your" computer or what?

Link to post
Share on other sites

Copy/paste the text in the Codebox below into notepad:

Here's how to do that:

Click Start > Run type Notepad click OK.

This will open an empty notepad file:

Take your mouse, and place your cursor at the beginning of the text in the box below, then click and hold the left mouse button, while pulling your mouse over the text. This should highlight the text. Now release the left mouse button. Now, with the cursor over the highlighted text, right click the mouse for options, and select 'copy'. Now over the empty Notepad box, right click your mouse again, and select 'paste' and you will have copied and pasted the text.

KillAll::

DDS::
c:\windows\system32\config\systemprofile\appdata\local\lhnetjqms\lkrjfudtssd.exe
c:\windows\system32\config\systemprofile\appdata\local\lhnetjqms

File::
c:\windows\system32\config\systemprofile\appdata\local\lhnetjqms\lkrjfudtssd.exe
C:\WINDOWS\system32\cryptnet32.dll

Folder::
c:\windows\system32\config\systemprofile\appdata\local\lhnetjqms

Registry::
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet32]

Save this file to your desktop, Save this as "CFScript"

Here's how to do that:

1.Click File;

2.Click Save As... Change the directory to your desktop;

3.Change the Save as type to "All Files";

4.Type in the file name: CFScript

5.Click Save ...

CFScriptB-4.gif

Drag CFScript.txt into ComboFix.exe

Then post the results log using Copy / Paste

Also please describe how your computer behaves at the moment.

Link to post
Share on other sites

You need to come up with one. Even if we remove the infections, you'll still need the cd to fix the boot issues.

Maybe you can find a friend that is using the same OS version you're using.

You could also contact Microsoft or the manufactor or the store you bought it from.

Link to post
Share on other sites

We should just need the cd. It does need to be a OS CD and not just a OEM restore cd that only lets you restore the pc to when it was purchased.

Just a little hint.

In the future if you ever buy a computer, make sure you get a real Windows OS cd/dvd and not just the OEM cd that the manufactor pre-installs.

All you can do with the OEM is re-install back to when they installed everything.

For the life of me I still don't know why MS allows that, but I guess it's all about the money.

Link to post
Share on other sites

All we want to do is boot the system with using the cd and fix the Master Boot Record.

This is how it will go:

To Restore Vista MBR, please use the following simple solution.

1. Start your computer from the Windows Vista Installation DVD

2. Press a key when prompted to continue

3. Choose your language, time, keyboard and click Next:

Select language and preferences

4. Next, click "Repair your Computer":

Repair your computer

5. Now, from the System Recovery Options dialog, select the "Operating System" you want to repair, then click Next:

System recovery options, choosing your Operating system

6. From the "Choose a Recovery Tool" dialog menu, select "Command Prompt":

Recovery Tool Command Prompt

7. Type the following into the "Command Prompt Window":

bootrec.exe /fixmbr

bootrec.exe /fixboot

8. Remove the Vista Installation DVD and restart your PC.

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.