[neataznyam]

didn't know virus can transfer onto usb, it's like an std

[Advertisements]

still nothing, should i restart the computer?

[neataznyam]

still nothing, should i restart the computer?

[maliprog]

Please try to run fixes in safe mode:

• If the computer is running, shut down Windows, and then turn off the power
• Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
• Ensure that the Safe mode option is selected.
• Press Enter. The computer then begins to start in Safe mode.

[neataznyam]

I've been doing it in safe mode the whole time.

[maliprog]

Use your clean system to download and burn disk. Please print these instruction out so that you know what you are doing

• Download OTLPEStd.exe to your desktop
• Ensure that you have a blank CD in the drive
• Double click OTLPEStd.exe and this will then open imgburn to burn the file to CD
• Reboot your system using the boot CD you just created.
  Note: If you do not know how to set your computer to boot from CD follow the steps here
• As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads
• Your system should now display a Reatogo desktop.
  Note : as you are running from CD it is not exactly speedy
• Double-click on the OTLPE icon.
• Select the Windows folder of the infected drive if it asks for a location
• When asked "Do you wish to load the remote registry", select Yes
• When asked "Do you wish to load remote user profile(s) for scanning", select Yes
• Ensure the box "Automatically Load All Remaining Users" is checked and press OK
• OTL should now start.
• Press Run Scan to start the scan.
• When finished, the file will be saved in drive C:\\OTL.txt
• Copy this file to your USB drive if you do not have internet connection on this system.
• Right click the file and select send to : select the USB drive.
• Confirm that it has copied to the USB drive by selecting it
• You can backup any files that you wish from this OS
• Please post the contents of the C:\\OTL.txt file in your reply.

[neataznyam]

okay let me go buy a cd

[neataznyam]

i can't open the program to image burn, i can try daemon

[neataznyam]

actually the computer doesn't even detect a cd

[maliprog]

Hi neataznyam,

i can't open the program to image burn, i can try daemon

You don't need a program to burn this. It will burn itself on CD.

actually the computer doesn't even detect a cd

You need to be more specific about this.

Did you manage to burn program to CD?
Did you try to run it on infected PC?

[neataznyam]

I put the cd in then tried to run the program but nothing ever happened. I burned it on the cd and tried to run it from there but still didn't work.

[maliprog]

Did you set your CD drive as primary boot device on infected PC as described Here

[neataznyam]

yeah I did what I could, I put the cd is primary boot then the hard drive as second but after that when it told me to go into more bios I couldn't find it. I don't know if me using windows 7 64bit has anything to do with it.

[maliprog]

That is strange... It should work. Please try to download and run this tool. It's little different from all others and this one should run fine.

1. Go HERE and download FileLister.

• Save it to your Desktop
• Right Click ->> Extract all ->> And extract it to your Desktop
• Additional help on extracting zip files can be found HERE
• Open the File Lister Folder.
• Note: Leave the FileLister.vbe file in the folder and run it from there.

• Right Click FileLister.vbe ->>Select Open Then Open to confirm.
• When the program is fnished it will produce a log for you Files.txt
• Which will be located in the default location from which FileLister was run(the FileLister folder)

Copy and paste the contents of that log in your reply.

[neataznyam]

theres no extract all option and i tried to open with winrar and nothing happened. I did the send to menu zip compressed folder but it just ended up creating the same file.

Edited by neataznyam, 02 April 2012 - 02:16 PM.

[neataznyam]

ok so what i did was I opened the file in a different computer