Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

I can not open any of my programs, a box pops up and ask's which p


  • This topic is locked This topic is locked

#16
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,172 posts
Good job! Now run OTL fix in infected account just like you did last time. After this make sure you reboot your system and test infected account. Let's see if this fix the problem...

Please close all running programs and Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following

    :OTL
    IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
    IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555
    O35 - HKCU\..exefile [open] -- "C:\Documents and Settings\Anna\Local Settings\Application Data\vaq.exe" -a "%1" %*
    [2011/06/12 18:28:26 | 000,017,364 | -HS- | C] () -- C:\Documents and Settings\Anna\Local Settings\Application Data\d0h8oedl0y462n0bmu7xyw4

    :Files
    ipconfig /flushdns /c
    C:\Documents and Settings\Anna\Local Settings\Application Data\vaq.exe
    C:\Documents and Settings\Anna\Local Settings\Application Data\d0h8oedl0y462n0bmu7xyw4

    :Commands
    [purity]
    [Reboot]

  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Post the fix log it produces in your next reply or you can find it in C:\_OTL\MovedFiles

  • 0

Advertisements


#17
AnnaMarie07

AnnaMarie07

    Member

  • Topic Starter
  • Member
  • PipPip
  • 12 posts
========== OTL ==========
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Classes\exefile\shell\open\command\\'' updated successfully.
File "C:\Documents and Settings\Anna\Local Settings\Application Data\vaq.exe" -a "%1" %* not found.
C:\Documents and Settings\Anna\Local Settings\Application Data\d0h8oedl0y462n0bmu7xyw4 moved successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\cmd.bat deleted successfully.
C:\cmd.txt deleted successfully.
File\Folder C:\Documents and Settings\Anna\Local Settings\Application Data\vaq.exe not found.
File\Folder C:\Documents and Settings\Anna\Local Settings\Application Data\d0h8oedl0y462n0bmu7xyw4 not found.
========== COMMANDS ==========

OTL by OldTimer - Version 3.2.26.1 log created on 08052011_072127
  • 0

#18
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,172 posts
Good... How is your system now? Any changes?
  • 0

#19
AnnaMarie07

AnnaMarie07

    Member

  • Topic Starter
  • Member
  • PipPip
  • 12 posts
I can now open programs under the infected user, but I am not able to turn Windows Automatic Update back on!
  • 0

#20
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,172 posts
Let's repair that too.

Download Microsoft FixIt and run it in order to repair updates. Test your system and come back with results so we can continue to make sure your system is clean.
  • 0

#21
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,172 posts
Hi AnnaMarie07,

Are you still with me? Did you manage to repair your updates?
  • 0

#22
maliprog

maliprog

    Trusted Helper

  • Malware Removal
  • 6,172 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP