Jump to content

SpySentinel

Honorary Members
 View Profile  See their activity

  • Posts

    1,847

  • Joined

  • Last visited

 Content Type 

Posts posted by SpySentinel

    Infected by Windows Restore virus, desktop icons missing

    in Resolved Malware Removal Logs

    Posted

    Sorry for the delay.

    Run OTL.exe

    • Under the Custom Scans/Fixes box at the bottom, paste in the following
      :OTL
      O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
      O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
      O4 - HKLM..\RunOnceEx: [] File not found
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 1
      [2009/10/20 19:34:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IObit
      @Alternate Data Stream - 147 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
      @Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8

      :Commands
      [purity]
      [resethosts]
      [emptytemp]
      [EMPTYFLASH]
      [CREATERESTOREPOINT]
      [Reboot]


    • Then click the Run Fix button at the top
    • Let the program run unhindered, reboot when it is done

    XP home security 2011-virus removal

    in Resolved Malware Removal Logs

    Posted

    Hi Jussi,

    Download TFC by OldTimer to your desktop

    • Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
    • It will close all programs when run, so make sure you have saved all your work before you begin.
    • Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. Let it run uninterrupted to completion .
    • Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

    • Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
    • Double click on RSIT.exe to run RSIT.
    • Click Continue at the disclaimer screen.
    • Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

    Infected by Windows Restore virus, desktop icons missing

    in Resolved Malware Removal Logs

    Posted

    • Download OTL to your desktop.
    • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
    • When the window appears, underneath Output at the top change it to Minimal Output.
    • Check the boxes beside LOP Check and Purity Check.
    • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
      • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
      • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.

    Please help me remove click.giftload

    in Resolved Malware Removal Logs

    Posted

    Scan with exeHelper:

    Please download exeHelper to your desktop.

    • Double-click on exeHelper.com to run the fix.
    • A black window should pop up, press any key to close once the fix is completed.
    • Post the contents of exehelperlog.txt (Will be created in the directory where you ran exeHelper.com, and should open at the end of the scan)

    Note: If the window shows a message that says "Error deleting file", please re-run the program

    Now try running TDSSKiller again.

    Infected by Windows Restore virus, desktop icons missing

    in Resolved Malware Removal Logs

    Posted

    You're welcome. :)

    Are you able to see your desktop icons now?

    Also, we will run RogueKiller again but this time we will have it remove the infections found:

    Run RogueKiller

    1. Quit all running programs
    2. For Vista/Seven, right click -> run as administrator, for XP simply run RogueKiller.exe
    3. When prompted, type 2 and validate
    4. The RKreport.txt shall be generated next to the executable.
    5. If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe

    Please post the contents of the RKreport.txt in your next Reply.

    XP home security 2011-virus removal

    in Resolved Malware Removal Logs

    Posted

    Hi Jussi,

    You're welcome :)

    When i started the script desktop went completely empty, like explorer crashed or something.

    Yes this happens during removal when the OTL script was ran.

    Launch Malwarebytes' Anti-Malware

    • Check for updates, and if there are any, they will download and install the latest version.
    • Once the program has loaded, select "Perform Quick Scan", then click Scan.
    • The scan may take some time to finish, so please be patient.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Make sure that everything is checked , and click Remove Selected.
    • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
    • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
    • Copy&Paste the entire report in your next reply.

    Extra Note:

    If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

    Run ESET Online Scan

    1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
      ESET OnlineScan
    2. Click the esetOnline.png button.
    3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

      2. Click on esetSmartInstall.png to download the ESET Smart Installer. Save it to your desktop.
      3. Double click on the esetSmartInstallDesktopIcon.png icon on your desktop.

      4. Check esetAcceptTerms.png
      5. Click the esetStart.png button.
      6. Accept any security warnings from your browser.
      7. Check esetScanArchives.png
      8. Push the Start button.
      9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      10. When the scan completes, push esetListThreats.png
      11. Push esetExport.png, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
      12. Push the esetBack.png button.
      13. Push esetFinish.png

        You can refer to this animation by neomage if needed.

    XP home security 2011-virus removal

    in Resolved Malware Removal Logs

    Posted

    Hi Jussi,

    You're welcome :) Nice to meet you as well.

    Run OTL.exe

    • Under the Custom Scans/Fixes box at the bottom, paste in the following
      :OTL
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
      O2 - BHO: (no name) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - No CLSID value found.
      O3 - HKLM\..\Toolbar: (no name) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - No CLSID value found.
      O4 - HKCU..\Run: [] File not found
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
      O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 181
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
      [2011.04.03 13:46:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\fFe31001nDoDj31001
      [2011.04.29 11:31:50 | 000,301,568 | ---- | M] () -- C:\Documents and Settings\Jussi\Desktop\ogg5g1nu.exe
      [2011.04.27 16:53:31 | 000,000,184 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\~18669364
      [2011.04.27 16:53:31 | 000,000,152 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\~18669364r
      [2011.04.27 16:47:30 | 000,011,466 | -HS- | M] () -- C:\Documents and Settings\Jussi\Local Settings\Application Data\u1wcvqrgcoc0p5ww4242sblyf378iyd68b54dm6nny
      [2011.04.27 16:47:30 | 000,011,466 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\u1wcvqrgcoc0p5ww4242sblyf378iyd68b54dm6nny
      [2011.04.27 08:12:52 | 000,000,328 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\18669364

      :Commands
      [purity]
      [resethosts]
      [emptytemp]
      [EMPTYFLASH]
      [CREATERESTOREPOINT]
      [Reboot]


    • Then click the Run Fix button at the top
    • Let the program run unhindered, reboot when it is done

    Please help me remove click.giftload

    in Resolved Malware Removal Logs

    Posted

    Please read carefully and follow these steps.

    • Download TDSSKiller and save it to your Desktop.
    • Extract its contents to your desktop.
    • Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
      TDSSKillermain.png
    • If an infected file is detected, the default action will be Cure, click on Continue.
      TDSSKillerMal-1.png
    • If a suspicious file is detected, the default action will be Skip, click on Continue.
      tdsskiller2.png
    • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
      TDSSKillerCompleted.png
    • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
    • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

    Please help me remove click.giftload

    in Resolved Malware Removal Logs

    Posted

    Launch Malwarebytes' Anti-Malware

    • Check to see if there are any updates, and download and install the latest version.
    • Once the program has loaded, select "Perform Quick Scan", then click Scan.
    • The scan may take some time to finish, so please be patient.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Make sure that everything is checked , and click Remove Selected.
    • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
    • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
    • Copy&Paste the entire report in your next reply.

    Extra Note:

    If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

    Run ESET Online Scan

    1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
      ESET OnlineScan
    2. Click the esetOnline.png button.
    3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

      2. Click on esetSmartInstall.png to download the ESET Smart Installer. Save it to your desktop.
      3. Double click on the esetSmartInstallDesktopIcon.png icon on your desktop.

      4. Check esetAcceptTerms.png
      5. Click the esetStart.png button.
      6. Accept any security warnings from your browser.
      7. Check esetScanArchives.png
      8. Push the Start button.
      9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      10. When the scan completes, push esetListThreats.png
      11. Push esetExport.png, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
      12. Push the esetBack.png button.
      13. Push esetFinish.png

        You can refer to this animation by neomage if needed.

    Please help me remove click.giftload

    in Resolved Malware Removal Logs

    Posted

    Hi matson,

    Run OTL.exe

    • Under the Custom Scans/Fixes box at the bottom, paste in the following
      :OTL
      O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Any Video To DVD DB Toolbar\tbcore3.dll ()
      O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
      O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
      O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

      :Commands
      [purity]
      [resethosts]
      [emptytemp]
      [EMPTYFLASH]
      [CREATERESTOREPOINT]
      [Reboot]


    • Then click the Run Fix button at the top
    • Let the program run unhindered, reboot when it is done

    Please help me remove click.giftload

    in Resolved Malware Removal Logs

    Posted

    Hi matson,

    Welcome to the Malwarebytes Support Forum :)

    My name is Matt and I will be assisting you.

    • Download OTL to your desktop.
    • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
    • When the window appears, underneath Output at the top change it to Minimal Output.
    • Check the boxes beside LOP Check and Purity Check.
    • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
      • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
      • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.

    updated hijack log advice appreciated

    in Resolved Malware Removal Logs

    Posted

    Please follow these steps carefully, and once you complete it, a log will be generated. Please post that log here in a reply.

    Run OTL.exe

    • Under the Custom Scans/Fixes box at the bottom, paste in the following
      :OTL
      FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"
      FF - prefs.js..browser.search.selectedEngine: "AVG Secure Search"
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars present
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
      O33 - MountPoints2\{4e1cfec0-1531-11e0-8828-001e338b062b}\Shell - "" = AutoRun
      O33 - MountPoints2\{4e1cfec0-1531-11e0-8828-001e338b062b}\Shell\AutoRun - "" = Auto&Play
      O33 - MountPoints2\{4e1cfec0-1531-11e0-8828-001e338b062b}\Shell\AutoRun\command - "" = D:\AutoRun.exe
      O33 - MountPoints2\{9cfd3796-677b-11e0-88c8-002163bf0b3f}\Shell - "" = AutoRun
      O33 - MountPoints2\{9cfd3796-677b-11e0-88c8-002163bf0b3f}\Shell\AutoRun - "" = Auto&Play
      O33 - MountPoints2\{9cfd3796-677b-11e0-88c8-002163bf0b3f}\Shell\AutoRun\command - "" = D:\setup_vmb_lite.exe -- [2010/07/08 12:14:50 | 000,274,432 | R--- | M] (Vodafone)
      [2011/04/26 21:55:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\SpeedyPC
      [2011/04/26 21:55:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SpeedyPC
      [2011/04/26 21:55:02 | 000,000,000 | ---D | C] -- C:\Program Files\SpeedyPC
      [2011/04/16 13:58:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Heather\Application Data\AVG
      [2011/04/16 13:58:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\AVG PC Tuneup 2011
      [2011/05/02 17:00:02 | 000,000,402 | ---- | M] () -- C:\WINDOWS\tasks\SpeedyPC Program Check.job
      [2011/04/26 21:55:12 | 000,000,386 | ---- | C] () -- C:\WINDOWS\tasks\SpeedyPC.job
      [2011/04/16 13:58:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Heather\Application Data\AVG
      [2010/12/18 00:48:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Heather\Application Data\AVG10
      [2009/12/27 12:36:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Heather\Application Data\IObit
      [2011/04/25 11:31:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG10
      [2009/11/27 05:04:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9
      [2009/09/14 22:41:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ParetoLogic Anti-Spyware
      [2009/09/14 23:19:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ParetoLogic Anti-Virus PLUS
      [2010/02/24 02:50:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IObit
      [2011/05/02 17:48:48 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\AWC AutoSweep.job
      [2011/04/19 18:00:00 | 000,000,408 | ---- | M] () -- C:\WINDOWS\Tasks\Pareto UNS.job
      [2011/05/02 18:00:00 | 000,000,444 | ---- | M] () -- C:\WINDOWS\Tasks\ParetoLogic Registration.job
      [2011/05/02 00:33:00 | 000,000,418 | ---- | M] () -- C:\WINDOWS\Tasks\ParetoLogic Update Version2.job
      @Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:430C6D84
      @Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B4227B4
      @Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
      @Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
      @Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1

      :Commands
      [purity]
      [resethosts]
      [emptytemp]
      [EMPTYFLASH]
      [CREATERESTOREPOINT]
      [Reboot]


    • Then click the Run Fix button at the top
    • Let the program run unhindered, reboot when it is done

    Infected by Windows Restore virus, desktop icons missing

    in Resolved Malware Removal Logs

    Posted

    Hi tjn8080,

    Welcome to the Malwarebytes Support Forum :)

    My name is Matt and I will be assisting you.

    This infection family will hide all the files on your computer from being seen. To make your files visible again, please download the following program to your desktop:

    Unhide.exe

    Once the program has been downloaded, double-click on the Unhide.exe icon on your desktop and allow the program to run. This program will remove the +H, or hidden, attribute from all the files on your hard drives. If there are any files that were purposely hidden by you, you will need to hide them again after this tool is run.

    Download RogueKiller to your desktop

    1. Quit all running programs
    2. For Vista/Seven, right click -> run as administrator, for XP simply run RogueKiller.exe
    3. When prompted, type 1 and validate
    4. The RKreport.txt shall be generated next to the executable.
    5. If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe

    Please post the contents of the RKreport.txt in your next Reply.

    XP home security 2011-virus removal

    in Resolved Malware Removal Logs

    Posted

    Hi Jussi,

    Welcome to the Malwarebytes Support Forum :)

    My name is Matt and I will be assisting you.

    • Download OTL to your desktop.
    • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
    • When the window appears, underneath Output at the top change it to Minimal Output.
    • Check the boxes beside LOP Check and Purity Check.
    • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
      • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
      • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.