Author Topic: Assitance please  (Read 5423 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Assitance please
« Reply #15 on: December 13, 2012, 08:10:14 PM »
Run OTL with this fix, when it reboots a log will popup please post that

Again the user name will need to be entered correctly

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:Files
C:\Users\xxxx\Documents\Windows\windows.updater.3.9.exe 
C:\Users\xxxx\Drivers\ghena.exe
C:\Users\xxxx\Drivers\kretos.exe

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

Dexter123

  • Guest
Re: Assitance please
« Reply #16 on: December 13, 2012, 09:41:24 PM »
Looks like that cleaned it up!?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Assitance please
« Reply #17 on: December 13, 2012, 09:50:22 PM »
How is the computer now ?

Dexter123

  • Guest
Re: Assitance please
« Reply #18 on: December 13, 2012, 10:23:21 PM »
Yes, aswMBR, and MBAM all look great. Time to clean up again. Thanks so much!

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Assitance please
« Reply #19 on: December 13, 2012, 10:50:10 PM »
My pleasure, the files were inert but always best to remove them