Scribd
Upload
50 views4 pages

Link 1 Link 2: Step 1

The document provides instructions for downloading and running various programs to scan and clean a device of potential malware and security issues. It instructs the user to download, install and run programs like TFC, Malwarebytes Anti-Malware and OTL to perform scans and cleaning. It then guides the user to re-run scans with OTL and check results logs to ensure issues are addressed.

Uploaded by

zirbeans
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as ODT, PDF, TXT or read online on Scribd
50 views4 pages

Link 1 Link 2: Step 1

The document provides instructions for downloading and running various programs to scan and clean a device of potential malware and security issues. It instructs the user to download, install and run programs like TFC, Malwarebytes Anti-Malware and OTL to perform scans and cleaning. It then guides the user to re-run scans with OTL and check results logs to ensure issues are addressed.

Uploaded by

zirbeans
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as ODT, PDF, TXT or read online on Scribd
You are on page 1/ 4

Step 1

Download Link 1 Link 2

TFC to your desktop, from either of the following links

Make sure any open work is saved. TFC will close all open application windows. Double-click TFC.exe to run the program. If prompted, click "Yes" to reboot. TFC will automatically close any open programs, let it run uninterrupted. It shouldn't take longer take a couple of minutes, and may only take a few seconds. Only if needed will you be prompted to reboot. Step 2

Please download Malwarebytes Anti-Malware and save it to your desktop. Alernative D/L mirror Alternative D/L mirror Double Click mbam-setup.exe to install the application. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish. If an update is found, it will download and install the latest version. Once the program has loaded, select "Perform Quick Scan", then click Scan. The scan may take some time to finish,so please be patient. When the scan is complete, click OK, then Show Results to view the results. Make sure that everything is checked, and click Remove Selected. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note) Please save the log to a location you will remember. The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM. Copy and paste the entire report in your next reply. Extra Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Step 3

Download Link 1 Link 2 Link 3

from any of the following links and save to your Desktop:

Double click on the icon to run it. Vista and Windows 7 users right click and select Run as Administrator. Make sure all other windows are closed and to let it run uninterrupted. In the lower right corner, checkmark "LOP Check" and checkmark "Purity Check". Under the Custom Scan box paste this in Code:
netsvcs drivers32 %SYSTEMDRIVE%\*.* %systemroot%\*. /mp /s CREATERESTOREPOINT %systemroot%\System32\config\*.sav HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpda

te\AU

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Windo wsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long. When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.

Continue as follows :-

Re-Run by double left click, Vista and Widows 7 users right click and select Run as Administrator. Under the Code:
:OTL O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4:64bit: - HKLM..\Run: [] File not found O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-94581830C7DD7F5D} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58B298-07617B9B86A8} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F9910D7BE1653C0} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F83F89B8E6324} - Reg Error: Key error. File not found O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:430C6D84

box at the bottom, paste in the following

@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMPFC5A2B2 :Services

:Reg

:Files ipconfig /flushdns /c C:\Users\Lori\AppData\Local\ugg.exe C:\Users\Lori\AppData\Local\pri.exe C:\Users\Lori\Desktop\null0.5182665308992576.exe C:\ProgramData\3567006381 C:\Users\Lori\AppData\Local\3567006381 :Commands [purity] [resethosts] [emptytemp] [EMPTYFLASH] [CREATERESTOREPOINT]

Then click button at the top Let the program run unhindered, reboot the PC when it is done Open OTL again and click the Quick Scan button. Try Malwarebytes again

You might also like