Need help to rid of virus

1. Right click on OTL.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
2. Underneath Output at the top, make sure Standard Output is selected.
3. Copy and Paste the following code into the text box. Do not include the word Code
   

   
   
   :Commands
   
   [createrestorepoint]
   
   
   
   :Reg
   
   [-HKEY_CURRENT_USER\Software\Trolltech]
   
   [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}]
   
   @=""
   
   [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}]
   
   @=""
   
   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]
   
   "C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\uninstbb.exe"=-
   
   [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb]
   
   "path"=-
   
   [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}]
   
   @=""
   
   
   
   :Files
   
   C:\Program Files\Babylon
   
   
   
   :Commands
   
   [emptytemp]
   
   [emptyflash]
   
   [emptyjava]
   
   

4. Click under the Custom Scan/Fixes box and paste the copied text.
5. Click the Run Fix button. If prompted... click OK.
6. OTL may ask to reboot the machine. Please do so if asked.
7. Let the program run unhindered and reboot the PC when it is done.
   When the computer reboots, and you start your usual account, a Notepad text file will appear.
8. Copy the contents of that file and post it in your next reply. The log can also be found, based on the date/time it was created, as C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log

1. Firstly please Disable any Antivirus you have active, as shown in This topic.
2. Note: Don't forget to re-enable it after the scan.
3. Next please click on the following link to open a new window to ESET online scannner
4. Then click on:
   

   Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
   All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.

5. Select the option YES, I accept the Terms of Use then click on:
6. When prompted allow the Add-On/Active X to install.
7. Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
8. Now click on Advanced Settings and select the following:
   
   • Scan for potentially unwanted applications
   • Scan for potentially unsafe applications
   • Enable Anti-Stealth Technology
9. Now click on:
10. The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
11. When completed the Online Scan will begin automatically.
12. Do not touch either the mouse or keyboard during the scan otherwise it may stall.
13. When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
14. Now click on:
15. Use notepad to open the log file located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
16. Copy and paste that log as a reply to this topic.

1. Do you have any problems executing the instructions?
2. Contents of the C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log log file after OTL FixScript run
3. Contents of the C:\Program Files\ESET\EsetOnlineScanner\log.txt log file
4. Do you see any changes in computer behavior?

1. Close all programs so that you are at your desktop.
2. Press .
3. Click the Start Search box on the Start Menu
4. Copy and paste the following value, in the open text entry box:
   change search options for files and folders
   then press Enter button
5. Click on the View tab, then under the "Hidden files and folders" section please
   
   • SELECT "Show hidden files and folders"
6. Find below and
   
   • remove check mark from check box "Hide extensions for known file types"
   • remove check mark from check box "Hide protected operating system files"
7. Press the Apply, then the OK buttons.

1. Please go to jotti.org or Virustotal
2. Copy/Paste the following files to upload them one by one for scanning:
   

   C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe
   C:\Program Files (x86)\Dell DataSafe Local Backup\hstart.exe
   C:\Windows\Downloaded Installations\{D764D5AB-33E4-49F7-A517-5898AB6E5564}\YouSendIt Express.msi
   C:\Windows\Installer\6e39a.msi
   N:\Programs\Any Video Converter\avc-free.exe
   N:\Programs\Subtitle Workshop\SoftonicDownloader31575.exe
   N:\Programs\USD (Universal Share Downloader) 1.3.6.7\sborka_blackmanos_13_67_indosharing.zip
   N:\Programs\Audacity Sound Editor\audacity-win-unicode-1.3.13.exe
   N:\Programs\DAEMON Tools Lite v4.45.3 (with SPTD 1.80)\DTLite4453-0297.exe
   N:\Programs\Subtitle Workshop 2.51\SoftonicDownloader_for_subtitle-workshop.exe
   

3. Press Submit - this will submit the file for testing.
   Note: If you will see a message "File already analysed", please click on "Reanalyse" button.
4. Please wait for all the scanners to finish.
5. Then copy and paste every permalink (web address) in your next response.
   Example of web address:
   

1. Do you have any problems executing the instructions?
2. The resulting web links after online file scan by Virus Total.
3. Do you see any changes in computer behavior?

1. Right click on OTL.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
2. Underneath Output at the top, make sure Standard Output is selected.
3. Copy and Paste the following code into the text box. Do not include the word Code
   

   
   
   :Commands
   
   [createrestorepoint]
   
   
   
   :Files
   
   N:\Programs\Subtitle Workshop\SoftonicDownloader31575.exe
   
   N:\Programs\USD (Universal Share Downloader) 1.3.6.7\sborka_blackmanos_13_67_indosharing.zip
   
   N:\Programs\Audacity Sound Editor\audacity-win-unicode-1.3.13.exe
   
   N:\Programs\Subtitle Workshop 2.51\SoftonicDownloader_for_subtitle-workshop.exe
   
   
   
   :Commands
   
   [emptytemp]
   
   

4. Click under the Custom Scan/Fixes box and paste the copied text.
5. Click the Run Fix button. If prompted... click OK.
6. OTL may ask to reboot the machine. Please do so if asked.
7. Let the program run unhindered and reboot the PC when it is done.
   When the computer reboots, and you start your usual account, a Notepad text file will appear.
8. Copy the contents of that file and post it in your next reply. The log can also be found, based on the date/time it was created, as C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log

• Close all open programs and Internet browsers.
• Right click on adwcleaner.exe and select "Run as administrator..." to run it.
• Click on Delete.
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next reply.
• You can find the log file at C:\AdwCleaner[S1].txt as well.

1. Do you have any problems executing the instructions?
2. Contents of the C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log log file after OTL FixScript run
3. Contents of the C:\AdwCleaner[S1].txt log file
4. Do you see any changes in computer behavior?

• Change your email Password.
• Change your Secret Question & Answer (if it possible).
• Change your alternative email.

1. Get the latest version (7u13) of Java Runtime Environment (JRE)... © Sun Microsystems, Inc.
2. Click the "Download JRE" button to the right.
3. Check "Accept License Agreement "
4. Locate the entry for Windows x64, click on the associated file name, then save the file to your Desktop.

1. Close all open applications (standard), especially your browser.
2. From Desktop please right-click on jre-7u13-windows-x64.exe select "Run As Administrator..." to install the newest version.
3. Follow the on-screen directions. When installation is completed successfully, please reboot your computer normally.
4. Once the computer has been restarted, you can delete the "downloaded" installation file from your desktop.

1. Right click on OTL.exe select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
2. Copy and Paste the following code into the text box. Do not include the word Code
   

   
   
   :Commands
   
   [EMPTYTEMP]
   
   [CLEARALLRESTOREPOINTS]
   
   

3. Click under the Custom Scan/Fixes box and paste the copied text.
4. Click the Run Fix button. If prompted... click OK.
5. OTL may ask to reboot the machine. Please do so if asked.

1. Right click on OTL.exe select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
2. Press the CleanUp button.
3. When done, you will be prompted to reboot your system to finish file removal, please select OK to reboot your computer.

After cleaning I sill have on my desktop JRE.exe, JRE.txt, esetsmartinstaller_enu.exe, ESET_log.txt, SystemLook_x64.exe, adwcleaner.exe, CCleaner. Do I need them or may try to uninstall thrugh Control Panel or delit from desktop?

1. JRE.exe
2. JRE.txt
3. esetsmartinstaller_enu.exe
4. ESET_log.txt
5. SystemLook_x64.exe
6. adwcleaner.exe