MaratGSB Posted April 5, 2011 ID:411170 Share Posted April 5, 2011 Been reading the forums for a few days, trying to remedy myself but have not succeeded. And I'm at the point now where I can't open any .exe or anything. I'm frustrated and could appreciate some help. Thank you ahead of time. Link to post Share on other sites More sharing options...
Elise Posted April 5, 2011 ID:411311 Share Posted April 5, 2011 Hello and Please right click on the OTL download link and select "save link/target as...". Save the file as OTL.com and try to run it that way.OTL-----Please download OTL from one of the following mirrors:This is THE Mirror[*]Save it to your desktop.[*]Double click on the icon on your desktop.[*]Click the "Scan All Users" checkbox.[*]Push the Quick Scan button.[*]Two reports will open, copy and paste them in a reply here:OTListIt.txt <-- Will be openedExtra.txt <-- Will be minimized Link to post Share on other sites More sharing options...
MaratGSB Posted April 5, 2011 Author ID:411434 Share Posted April 5, 2011 Thank you for your quick response. I'm actually on my HTC Incredible right now, using this as my resource to read on the topic, so I haven't been able to save files under different names. Will I have to use a friends computer to do this? Link to post Share on other sites More sharing options...
Elise Posted April 5, 2011 ID:411435 Share Posted April 5, 2011 Yes, you can download them from any computer. Link to post Share on other sites More sharing options...
MaratGSB Posted April 5, 2011 Author ID:411437 Share Posted April 5, 2011 Yes, you can download them from any computer.I figured it out on my phone. Thanks for your patience. Scanning now, will post momentarily. Link to post Share on other sites More sharing options...
MaratGSB Posted April 5, 2011 Author ID:411439 Share Posted April 5, 2011 Bottom of window states Scans Complete, but no logs popped up. I have Scan All Users checked. Link to post Share on other sites More sharing options...
Elise Posted April 5, 2011 ID:411445 Share Posted April 5, 2011 The logs usually are saved as OTL.txt and Extra.txt in C:\ See if you can locate them there (using My Computer) and copy them to a flashdrive. Link to post Share on other sites More sharing options...
MaratGSB Posted April 5, 2011 Author ID:411456 Share Posted April 5, 2011 The logs usually are saved as OTL.txt and Extra.txt in C:\ See if you can locate them there (using My Computer) and copy them to a flashdrive.Extra.txt could not be found. Here is otl.txt. Link to post Share on other sites More sharing options...
MaratGSB Posted April 5, 2011 Author ID:411469 Share Posted April 5, 2011 Well I'm having some real odd troubles. On my Incredible, when I paste the log txt into the reply box, I can't do anything. The browser will not let me navigate anywhere. I have to reboot my phone every time. Could an infection be carried over to the OS of the phone? Link to post Share on other sites More sharing options...
Elise Posted April 5, 2011 ID:411475 Share Posted April 5, 2011 No need for extra.txt right now if it isn't there. Try to attach the file instead of copy/pasting it. Link to post Share on other sites More sharing options...
MaratGSB Posted April 5, 2011 Author ID:411491 Share Posted April 5, 2011 Here you go, thanks again! Really appreciate everything so far.OTL.Txt Link to post Share on other sites More sharing options...
Elise Posted April 5, 2011 ID:411505 Share Posted April 5, 2011 Hi, good news, I've found the culprit here. Please rerun OTL, but now instead of clicking Quick Scan, copy/paste the following text into the Custom Scan/Fix field and click Run Fix.You can save the script in a Notepad file and put it on the flashdrive so you can access it on the infected computer.:otlO35 - HKU\S-1-5-21-1454471165-1645522239-839522115-500..exefile [open] -- "C:\Documents and Settings\Administrator\Local Settings\Application Data\avt.exe" -a "%1" %* ()O37 - HKU\S-1-5-21-1454471165-1645522239-839522115-500\...exe [@ = exefile] -- "C:\Documents and Settings\Administrator\Local Settings\Application Data\avt.exe" -a "%1" %* ()[2011/04/05 08:48:38 | 000,000,262 | -H-- | M] () -- C:\WINDOWS\tasks\{810401E2-DDE0-454e-B0E2-AA89C9E5967C}.job[2011/04/05 08:41:09 | 000,000,326 | -HS- | M] () -- C:\WINDOWS\tasks\YYQVC.job[2011/04/04 19:41:41 | 000,013,922 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\0810l5u6odc6bt4h[2011/04/04 19:41:41 | 000,013,922 | -HS- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\0810l5u6odc6bt4h[2011/04/04 19:41:34 | 000,225,805 | -HS- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\avt.exe[2011/04/01 12:33:46 | 000,164,352 | ---- | C] () -- C:\WINDOWS\Ivohoa.exe[2011/04/01 12:33:32 | 000,135,168 | RHS- | C] () -- C:\WINDOWS\System32\spmsgb.dll:commands[reboot] Your computer will be rebooted when the fix is done. Please let me know how things are running afterwards. Link to post Share on other sites More sharing options...
Staff screen317 Posted April 28, 2011 Staff ID:422434 Share Posted April 28, 2011 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts