Fix for nandosest

Viruses and worms
1

Could you keep your replies to this thread

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
O4 - HKU\S-1-5-21-3179077868-753582946-3245169435-1004..\Run: [ff2] C:\Users\SONY\AppData\Roaming\e93\ff2.js ()
[2013/06/11 15:58:39 | 000,000,000 | -HSD | C] -- C:\Users\SONY\AppData\Roaming\e93
[2013/06/11 15:58:39 | 000,000,000 | -HSD | C] -- C:\e85

:Files

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

2

Done.
Log attached.
Waiting next instructions.

3

OK that did not appear to work… Could you run this fix from safe mode please… Once done allow it to reboot to normal mode

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
O4 - HKCU..\Run: [ff2] C:\Users\SONY\AppData\Roaming\e93\ff2.js File not found
[2013/06/19 18:10:31 | 000,000,000 | -HSD | C] -- C:\Users\SONY\AppData\Roaming\e93
[2013/06/19 18:10:31 | 000,000,000 | -HSD | C] -- C:\e85

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

4

Done.
Waiting another instructions.

5

That killed it, any further problems ?

6

It looks fine…
Even McShield is working now.
How can a clean my pendrives e external hd ? They can pass again the worm to my pc?
thanks!

7

Ensure that McShield is running and updated and then plug in the drives, they should now be cured