05-11-2012 08:33 PM
success.
05-11-2012 08:45 PM
Run aswMBR again
Just want to make sure the image file C:\WINDOWS\system32\drivers\mrxsmb.sys_backup and links are gone before the final objects clean up process.
broke my train of thought as just had in the middle of this an earthquake aftershock.
Quads
05-11-2012 08:56 PM
Bummer. A whole lot of shaking going on, huh? All quiet in Illinois. No tornadoes for a few weeks! We did have an earthequake a couple years ago....that was unique for here.
Anyway, I digress. Log attached.
05-11-2012 09:03 PM
You forgot the definitions step in aswMBR
Look up Christchurch NZ earthquakes
Quads
05-11-2012 09:08 PM
I didn't, but maybe I didn't wait long enough. I got distracted, looked back and saw the Scan button was enabled, so I thought it was done. I'll try again. Haven't seen anything on Christchurch. I'll look it up......
05-11-2012 09:28 PM
Okay,
This time it downloaded twice the size in definitions files. Also took longer to scan. Must have burped teh first time. ANyway, log attached.
05-11-2012 09:45 PM
The bugger is still hanging on
Download a new copy of Combofix and like before (same instructions) but use this script attached
Quads
05-11-2012 09:50 PM
I checked the Internet. Seems like you have been shaking all week!
I'll run ComboFix again, but don't expect a post until later. Its midnight and I need to sleep!
I really appreciate your time and assistance. Hope your shaking isn't signs of things to come.
05-11-2012 09:55 PM
We started with the 7.1 shake back in 2010
Quads
05-12-2012 06:21 AM
Second ComboFix log attached.
