Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93084 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

[Resolved] trojan:win32/renos.n


  • This topic is locked This topic is locked
112 replies to this topic

#46 entropy1120

entropy1120

    Authentic Member

  • Authentic Member
  • PipPip
  • 70 posts

Posted 04 October 2009 - 01:45 PM

the links won't save to usb either.

    Advertisements

Register to Remove


#47 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,060 posts
  • MVP

Posted 04 October 2009 - 04:03 PM

Hi,

try and use Internet Explorer for this next download.

We need to scan the system with this special tool.
  • Step One
  • Please download Junction.zip and save it to your desktop.
  • Unzip it and extract junction.exe to your C:\ drive.
  • Step Two
  • Now copy (Ctrl +C) and paste (Ctrl +V) the text inside the code box below into Notepad.

    @ECHO OFF
    cd c:\
    junction -s c:\>log.txt
    start log.txt
    del %0
  • Save it to your desktop as File name: junc.bat
    Save as type: All Files
  • Step Three
  • Double click junc.bat to run it. A log will be presented. Copy and paste or attach the content of the log in your next reply.

If it will not save on your desktop, try saving it directly to your C:\ drive


next

try running this next too, it may run from a USB

As a Vista user, the programs I ask you to run, should be run by right clicking the icon and selecting Run as Administrator. Otherwise some programs may fail to operate correctly


  • Download OTL to your desktop.
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
    Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#48 entropy1120

entropy1120

    Authentic Member

  • Authentic Member
  • PipPip
  • 70 posts

Posted 04 October 2009 - 07:11 PM

nothing will save to desktop, or c: or usb. i am now using IE.

Edited by entropy1120, 04 October 2009 - 07:11 PM.


#49 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,060 posts
  • MVP

Posted 04 October 2009 - 07:31 PM

I need to look into this a little more...I'll try and give you further instructions as soon as possible.

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#50 entropy1120

entropy1120

    Authentic Member

  • Authentic Member
  • PipPip
  • 70 posts

Posted 04 October 2009 - 07:33 PM

ok..found junction on c: (shortcut) -i double click-nothing happens -right click: open file location, located in AppData>Roaming>microsoft>windows>recent. -send to desktop: could not create, check to see if file full -delete: no longer located in <%3NULL:OpText> verify location

#51 entropy1120

entropy1120

    Authentic Member

  • Authentic Member
  • PipPip
  • 70 posts

Posted 04 October 2009 - 07:44 PM

i got it to delete. i think. i saved it again to c: when i open c: it's not listed. only when i type it in search it comes up. click open with winzip and it says this shortcut has been changed or moved. do i want to delete shortcut.

#52 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,060 posts
  • MVP

Posted 04 October 2009 - 07:47 PM

OK..follow the instructions from the previous post for junction...it isn't supposed to be clicked on...junction is where you want it in your C:\ drive...now do the following

  • Step Two
  • Now copy (Ctrl +C) and paste (Ctrl +V) the text inside the code box below into Notepad.

    @ECHO OFF
    cd c:\
    junction -s c:\>log.txt
    start log.txt
    del %0
  • Save it to your desktop as File name: junc.bat to do this go to go to File > Save as > save in and make sure you type in desktop
    Save as type: All Files
  • Step Three
  • Double click junc.bat to run it. A log will be presented. Copy and paste or attach the content of the log in your next reply.

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#53 entropy1120

entropy1120

    Authentic Member

  • Authentic Member
  • PipPip
  • 70 posts

Posted 04 October 2009 - 08:11 PM

i got to step three. double clicked to run it and it disappeared and said access denied. and then it disappeard from desktop.

#54 entropy1120

entropy1120

    Authentic Member

  • Authentic Member
  • PipPip
  • 70 posts

Posted 04 October 2009 - 08:15 PM

ok i did it again. this is exactly what it does: windows box pops up saying "cannot find log.txt make sure you typed name correctly and try again. black box opens titled: C:\windows\system32\cmd.exe inside box it says: access is denied.

#55 entropy1120

entropy1120

    Authentic Member

  • Authentic Member
  • PipPip
  • 70 posts

Posted 04 October 2009 - 08:24 PM

ok, sorry i'm not computer savvy. ran as admin and log is blank.

    Advertisements

Register to Remove


#56 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,060 posts
  • MVP

Posted 05 October 2009 - 08:00 PM

Hi,

Please do the following:

Click Start then type cmd.exe in the Start Search window.
When cmd.exe populates in the Programs list, right click the entry and select 'Run as Administrator' to open an elevated command window.
Copy the contents of the code box below, then right click in the command window and select Paste.

reg save HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU "%userprofile%\desktop\OpenSavePidlMRU.hiv"
reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU /f
exit
cls

The commands will process quickly and the command window will close on its own.


Click the following link for the AVG Removal tool.

http://www.avg.com/f.../avgremover.exe

In the File download dialog box, click Save.
When the Save dialog box opens, be sure you have a list of places in the left column. If not, click Browse Folders.
You should now see a column on the left named Favorite Links.
Select Desktop, then click Save.

If you still don't see the file avgremover.exe on your desktop, right click a blank space and select View, then verify there is a check next to 'Show Desktop Icons'.

If it is already checked, try unchecking then rechecking.

If you still cannot see the file, open another command window, as previously instructed, then paste the following bolded command and hit Enter.

"%userprofile%\desktop\avgremover.exe"

Let me know the results please.



how many shortcuts/files do you have on your desktop?

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#57 entropy1120

entropy1120

    Authentic Member

  • Authentic Member
  • PipPip
  • 70 posts

Posted 06 October 2009 - 01:06 PM

ok none of that worked. avg remover not in desktop and i followed your steps exactly, i received this message when pasting the last command "not recognized as an internal or external command,operable program or batch file." 21 icons on desktop

#58 CatByte

CatByte

    Classroom Administrator

  • Classroom Admin
  • 21,060 posts
  • MVP

Posted 06 October 2009 - 01:21 PM

are you able to post a screen shot of your desktop for me

thanks

do you remember what you did in post #7 - where you were able to save to the desktop?

http://forums.whatth...110#entry600110

Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015


#59 entropy1120

entropy1120

    Authentic Member

  • Authentic Member
  • PipPip
  • 70 posts

Posted 06 October 2009 - 01:40 PM

i'm not sure what i did. but exe is on my desktop. how do i take a screen shot?

#60 entropy1120

entropy1120

    Authentic Member

  • Authentic Member
  • PipPip
  • 70 posts

Posted 06 October 2009 - 01:41 PM

when i try to open exe. it says it's not compatible with my system.

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users