[Danii OW]

I dont know why but every 3 minutes I get this error from a program called "AutoIt":  Line 0 (File "C:\ProgramData\gedvdk\GeDvDK:):   Error: Error opening the file.

Attached Files

•  Addition.txt   34.27KB   270 downloads
•  FRST.txt   113.63KB   240 downloads

[Advertisements]

Could you let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
CHR HomePage: Default -> hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNaV3H3DZYb7HM7ee2NXA3KJnRfVfopVh1MmcC_1yVGTI1ASlfRUBKpZFRpzPTIT48jx4E0GbIal_z-9hdKu9SYMCHJZokNU3uJY0aVM84JspmK1X-f96pFCFr5poRgQACos_VU_GOJ9EhN4bCgsiEWjR1jYffzLj9PWjL1orhVUw,
2016-03-28 21:53 - 2016-03-29 10:13 - 00000000 ____D C:\ProgramData\gedvdk
2016-03-28 21:53 - 2016-03-28 21:53 - 00003572 _____ C:\WINDOWS\System32\Tasks\WindowsUpdategedvdk0x8429524
2016-03-20 22:52 - 2016-03-20 22:52 - 00000000 __SHD C:\Users\SSForce\AppData\LocalLow\EmieUserList
2016-03-20 22:52 - 2016-03-20 22:52 - 00000000 __SHD C:\Users\SSForce\AppData\LocalLow\EmieSiteList
2016-03-20 22:52 - 2016-03-20 22:52 - 00000000 __SHD C:\Users\SSForce\AppData\Local\EmieUserList
2016-03-20 22:52 - 2016-03-20 22:52 - 00000000 __SHD C:\Users\SSForce\AppData\Local\EmieSiteList
Task: {943DBDFB-24DC-47DD-AFC6-DAD1F6C3AC60} - System32\Tasks\WindowsUpdategedvdk0x8429524 => C:\ProgramData\gedvdk\htnHad.vbs [2016-03-28] ()
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

[Essexboy]

Could you let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
CHR HomePage: Default -> hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYEqQao2TxTGptbOxpBNaV3H3DZYb7HM7ee2NXA3KJnRfVfopVh1MmcC_1yVGTI1ASlfRUBKpZFRpzPTIT48jx4E0GbIal_z-9hdKu9SYMCHJZokNU3uJY0aVM84JspmK1X-f96pFCFr5poRgQACos_VU_GOJ9EhN4bCgsiEWjR1jYffzLj9PWjL1orhVUw,
2016-03-28 21:53 - 2016-03-29 10:13 - 00000000 ____D C:\ProgramData\gedvdk
2016-03-28 21:53 - 2016-03-28 21:53 - 00003572 _____ C:\WINDOWS\System32\Tasks\WindowsUpdategedvdk0x8429524
2016-03-20 22:52 - 2016-03-20 22:52 - 00000000 __SHD C:\Users\SSForce\AppData\LocalLow\EmieUserList
2016-03-20 22:52 - 2016-03-20 22:52 - 00000000 __SHD C:\Users\SSForce\AppData\LocalLow\EmieSiteList
2016-03-20 22:52 - 2016-03-20 22:52 - 00000000 __SHD C:\Users\SSForce\AppData\Local\EmieUserList
2016-03-20 22:52 - 2016-03-20 22:52 - 00000000 __SHD C:\Users\SSForce\AppData\Local\EmieSiteList
Task: {943DBDFB-24DC-47DD-AFC6-DAD1F6C3AC60} - System32\Tasks\WindowsUpdategedvdk0x8429524 => C:\ProgramData\gedvdk\htnHad.vbs [2016-03-28] ()
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

[Danii OW]

It work, thank you so much

[Essexboy]

Could you post the fixlog please and let me know of any further problems

[Essexboy]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.