Fix for vivekB

Viruses and worms
1

Your fix :slight_smile:

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
O3:64bit: - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O4 - HKU\S-1-5-21-3036288561-1882285572-2037485662-1000..\Run: [5811] C:\Users\vivek\AppData\Roaming\4e0\5811.js ()
O4 - HKU\S-1-5-21-3036288561-1882285572-2037485662-1000..\Run: [MSConfig] "C:\Users\vivek\kcfuqtzy.exe" File not found
O4 - Startup: C:\Users\vivek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\095.js ()
[2013/06/05 11:20:06 | 000,000,000 | -HSD | C] -- C:\4f6f
[2013/06/05 11:20:06 | 000,000,000 | -HSD | C] -- C:\Users\vivek\AppData\Roaming\4e0
[2013/06/13 14:00:04 | 000,048,933 | ---- | C] () -- C:\Users\vivek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\095.js
[2013/06/05 11:20:06 | 000,000,000 | -HSD | M] -- C:\Users\vivek\AppData\Roaming\4e0
[2013/04/21 12:16:35 | 000,000,000 | ---D | M] -- C:\Users\vivek\AppData\Roaming\OpenCandy
@Alternate Data Stream - 1142800 bytes -> C:\Users\vivek\AppData\Roaming\desktop.ini:init

:Files
C:\Users\vivek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

2

vivekB have also posted here. http://forum.avast.com/index.php?topic=127100

3

Dear essexboy, Thank you so much for your help. Everything is working fine now. Thank you :slight_smile: :slight_smile:

4

I forgot about the quick scan after running the fix. Here is the log file

5

Looks good, any further problems ?

6

Tip for you vivek: I assume you are from India looking at your name…so…here is what I see people do mistakes everyday in india…so some things for you:

1- Never turn off your AV ever even if you are in a computer shop or cyber cafe and never do it on anyone’s saying.

2- Remember no AV detected 100% because everyday 50,000 viruses come out.Use avast [one of my top pic AV] I recommend it to all of my clients and they are clean and protected from this crap.

3- Always exercise self caution when using USB’s and browsing internet,never watch porn or click on links that you dont know what they are about on facebook,twitter etc.

4- Disable autorun feature in your PC which viruses use to launch automatically from USB;s,see here on how to do it:
http://support.microsoft.com/kb/967715

5- Stay away from dubious Antivirus products like NPAV,QuickHeal,K7 etc and only use 1 AV program on your PC,you pair 1 AV program with Malwarebytes Antimalware which runs alongside with any AV and helps protecting your PC,see: malwarebytes.org

6- DONT use cracks,illegal,hacking software and stuff as they come bundled with viruses.Keep your windows and softwares up to date.

7- Essexboy will link you to a guide after he confirms your problem is solved,read and follow the guide carefully.

8- Read my tips again. :wink: