[kerrykitten]

Hello

Please can you help me I'm tearing my hair out

Turned on my XP machine yesterday and it boots to a German screen asking for money..

It won't let me go into safe mode either

Would appreciate any help

Iv'e attached a pic of the screen for you.

Its a Dell Dimension running XP pro.

Thankyou

Attached Thumbnails

• 

[Advertisements]

Hello and welcome to Geekstogo!

We apologize for the delay in responding to your request for help.
If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below.



Follow these first steps on another PC:

Please print these instruction out so that you know what you are doing.

• Download OTLPEStd.exe to your desktop.
• Ensure that you have a blank CD in the drive.
• Double click OTLPEStd.exe and this will then open imgburn to burn the file to CD.
  
• Reboot the infected system using the boot CD you just created.
  Note : If you do not know how to set your computer to boot from CD follow the steps here.
• As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads.
  
  
• Your system should now display a Reatogo desktop.
  Note : as you are running from CD it is not exactly speedy.
• Double-click on the OTLPE icon.
• Select the Windows folder of the infected drive if it asks for a location.
• When asked "Do you wish to load the remote registry", select Yes.
• When asked "Do you wish to load remote user profile(s) for scanning", select Yes.
• Ensure the box "Automatically Load All Remaining Users" is checked and press OK.
• OTL should now start.
• Press Run Scan to start the scan.
• When finished, the file will be saved in drive C:\OTL.txt.
• Copy this file to your USB drive if you do not have internet connection on this system.
• Right click the file and select send to : select the USB drive.
• Confirm that it has copied to the USB drive by selecting it
• You can backup any files that you wish from this OS
• Please post the contents of the C:\OTL.txt file in your reply.

[Gammo]

Hello and welcome to Geekstogo!

We apologize for the delay in responding to your request for help.
If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below.



Follow these first steps on another PC:

Please print these instruction out so that you know what you are doing.

• Download OTLPEStd.exe to your desktop.
• Ensure that you have a blank CD in the drive.
• Double click OTLPEStd.exe and this will then open imgburn to burn the file to CD.
  
• Reboot the infected system using the boot CD you just created.
  Note : If you do not know how to set your computer to boot from CD follow the steps here.
• As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads.
  
  
• Your system should now display a Reatogo desktop.
  Note : as you are running from CD it is not exactly speedy.
• Double-click on the OTLPE icon.
• Select the Windows folder of the infected drive if it asks for a location.
• When asked "Do you wish to load the remote registry", select Yes.
• When asked "Do you wish to load remote user profile(s) for scanning", select Yes.
• Ensure the box "Automatically Load All Remaining Users" is checked and press OK.
• OTL should now start.
• Press Run Scan to start the scan.
• When finished, the file will be saved in drive C:\OTL.txt.
• Copy this file to your USB drive if you do not have internet connection on this system.
• Right click the file and select send to : select the USB drive.
• Confirm that it has copied to the USB drive by selecting it
• You can backup any files that you wish from this OS
• Please post the contents of the C:\OTL.txt file in your reply.

[kerrykitten]

Thanks but I managed to remove it using a bootable Bitdefender disc and Malwarebytes.

This thred can now be closed

[Gammo]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.