Could you check in device manager to see if any yellow exclamation marks are there
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot
If you have Malwarebytes 1.6 or better installed please disable it for the duration of this run
Run OTL
- Under the Custom Scans/Fixes box at the bottom, paste in the following
:OTL
IE - HKU\S-1-5-21-1957994488-842925246-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1
IE - HKU\S-1-5-21-1957994488-842925246-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = localhost:12080
O3 - HKU\S-1-5-21-1957994488-842925246-839522115-1003\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O33 - MountPoints2\{33a2a2df-a252-11df-a4e1-001e8c269596}\Shell\AutoRun\command - "" = J:\laucher.exe
O33 - MountPoints2\{33a2a2e1-a252-11df-a4e1-001e8c269596}\Shell\AutoRun\command - "" = J:\laucher.exe
[2012/02/04 11:45:23 | 000,000,320 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\~rvjxVaaaNz56kH
[2012/02/04 11:45:23 | 000,000,216 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\~rvjxVaaaNz56kHr
[2012/02/04 11:45:19 | 000,000,344 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\rvjxVaaaNz56kH
:Files
ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
- Then click the Run Fix button at the top
- Let the program run unhindered, reboot the PC when it is done
- Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
Hi. I did have a problem just this afternoon when I discovered my Realtek HD Audio wasn't recognized. I went into Device Manager and it had an exclamation mark by it. I subsequently got the sound back. I PM'd you today regarding current status.
Also, how do I disable MBAM (free)?
Again, regarding the latest fix, I can't create restore point.
Presume quote points after [emptytemp]?
Please advise before I proceed anything else, thanks.