system
4
http://i1224.photobucket.com/albums/ee380/jeffce74/RegistryIcon_zps289d6da1.png
Tweaking.com Registry Backup
[]Download the tool found here to your Desktop so it is easy to find.
[]Double click on the file you just downloaded to install it to your system.
[*]Once the tool is installed, double-click on the Tweaking.com Registry Backup icon
Note The tool should automatically open to the Backup Registry tab.
http://i1224.photobucket.com/albums/ee380/jeffce74/TweakingcomRegBackup_zpsd4be1488.jpg
[*]Press Backup Now
[*]When the back up is complete, the tool will tell you that Successful / Files Backed Up
[*]You have now successfully backed up your Registry.
Run OTL.exe
[*]Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
:Services
:OTL
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [] File not found
O4 - HKU\S-1-5-21-2601538084-2854319939-2143446311-1001..\Run: [73ca7] C:\Users\bandk\AppData\Roaming\65dc\73ca7.js ()
O4 - Startup: C:\Users\bandk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\218.js ()
O33 - MountPoints2\{10b46dd6-8fa3-11e2-be77-4c72b9adc60d}\Shell - "" = AutoRun
O33 - MountPoints2\{10b46dd6-8fa3-11e2-be77-4c72b9adc60d}\Shell\AutoRun\command - "" = "E:\AutoRun.exe"
O33 - MountPoints2\{2faed953-8b5e-11e2-be71-4c72b9adc60d}\Shell - "" = AutoRun
O33 - MountPoints2\{2faed953-8b5e-11e2-be71-4c72b9adc60d}\Shell\AutoRun\command - "" = "E:\AutoRun.exe"
O33 - MountPoints2\{2faedb25-8b5e-11e2-be71-4c72b9adc60d}\Shell - "" = AutoRun
O33 - MountPoints2\{2faedb25-8b5e-11e2-be71-4c72b9adc60d}\Shell\AutoRun\command - "" = "G:\AutoRun.exe"
O33 - MountPoints2\{2faedb6f-8b5e-11e2-be71-4c72b9adc60d}\Shell - "" = AutoRun
O33 - MountPoints2\{2faedb6f-8b5e-11e2-be71-4c72b9adc60d}\Shell\AutoRun\command - "" = "E:\AutoRun.exe"
O33 - MountPoints2\{9a0c2c0d-8b5d-11e2-be75-4c72b9adc60d}\Shell - "" = AutoRun
O33 - MountPoints2\{9a0c2c0d-8b5d-11e2-be75-4c72b9adc60d}\Shell\AutoRun\command - "" = "E:\AutoRun.exe"
O33 - MountPoints2\{9b542469-fd69-11e1-be6f-806e6f6e6963}\Shell\AutoRun\command - "" = "D:\Start.exe"
O33 - MountPoints2\{9b542469-fd69-11e1-be6f-806e6f6e6963}\Shell\Install\Command - "" = D:\Start.exe
[2013/06/18 10:46:14 | 000,000,000 | -HSD | C] -- C:\Users\bandk\AppData\Roaming\65dc
[2013/06/18 10:46:14 | 000,000,000 | -HSD | C] -- C:\6470d
:Files
ipconfig /flushdns /c
:Commands
[emptytemp]
[resethosts]
[start explorer]
[Reboot]
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot when it is done
[*]Then run a new scan and post a new OTL log ( don’t check the boxes beside LOP Check or Purity this time )