[Resolved] trojan:win32/renos.n

the links won't save to usb either.

Hi,

try and use Internet Explorer for this next download.

We need to scan the system with this special tool.

• Step One
• Please download Junction.zip and save it to your desktop.
• Unzip it and extract junction.exe to your C:\ drive.
  
• Step Two
• Now copy (Ctrl +C) and paste (Ctrl +V) the text inside the code box below into Notepad.
  
  

  @ECHO OFF
  cd c:\
  junction -s c:\>log.txt
  start log.txt
  del %0

• Save it to your desktop as File name: junc.bat
  Save as type: All Files
  
• Step Three
• Double click junc.bat to run it. A log will be presented. Copy and paste or attach the content of the log in your next reply.

If it will not save on your desktop, try saving it directly to your C:\ drive


next

try running this next too, it may run from a USB

As a Vista user, the programs I ask you to run, should be run by right clicking the icon and selecting Run as Administrator. Otherwise some programs may fail to operate correctly

• Download OTL to your desktop.
• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• When the window appears, underneath Output at the top change it to Minimal Output.
• Check the boxes beside LOP Check and Purity Check.
• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
  Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.

nothing will save to desktop, or c: or usb. i am now using IE.

I need to look into this a little more…I'll try and give you further instructions as soon as possible.

ok..found junction on c: (shortcut) -i double click-nothing happens -right click: open file location, located in AppData>Roaming>microsoft>windows>recent. -send to desktop: could not create, check to see if file full -delete: no longer located in <%3NULL:OpText> verify location

i got it to delete. i think. i saved it again to c: when i open c: it's not listed. only when i type it in search it comes up. click open with winzip and it says this shortcut has been changed or moved. do i want to delete shortcut.

OK..follow the instructions from the previous post for junction…it isn't supposed to be clicked on…junction is where you want it in your C:\ drive…now do the following

• Step Two
• Now copy (Ctrl +C) and paste (Ctrl +V) the text inside the code box below into Notepad.
  
  

  @ECHO OFF
  cd c:\
  junction -s c:\>log.txt
  start log.txt
  del %0

• Save it to your desktop as File name: junc.bat to do this go to go to File > Save as > save in and make sure you type in desktop
  Save as type: All Files
  
• Step Three
• Double click junc.bat to run it. A log will be presented. Copy and paste or attach the content of the log in your next reply.

i got to step three. double clicked to run it and it disappeared and said access denied. and then it disappeard from desktop.

ok i did it again. this is exactly what it does: windows box pops up saying "cannot find log.txt make sure you typed name correctly and try again. black box opens titled: C:\windows\system32\cmd.exe inside box it says: access is denied.

ok, sorry i'm not computer savvy. ran as admin and log is blank.

Hi,

Please do the following:

Click Start then type cmd.exe in the Start Search window.
When cmd.exe populates in the Programs list, right click the entry and select 'Run as Administrator' to open an elevated command window.
Copy the contents of the code box below, then right click in the command window and select Paste.

reg save HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU "%userprofile%\desktop\OpenSavePidlMRU.hiv"
reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSavePidlMRU /f
exit
cls

The commands will process quickly and the command window will close on its own.


Click the following link for the AVG Removal tool.

http://www.avg.com/filedir/util/avg_arm_su…/avgremover.exe

In the File download dialog box, click Save.
When the Save dialog box opens, be sure you have a list of places in the left column. If not, click Browse Folders.
You should now see a column on the left named Favorite Links.
Select Desktop, then click Save.

If you still don't see the file avgremover.exe on your desktop, right click a blank space and select View, then verify there is a check next to 'Show Desktop Icons'.

If it is already checked, try unchecking then rechecking.

If you still cannot see the file, open another command window, as previously instructed, then paste the following bolded command and hit Enter.

"%userprofile%\desktop\avgremover.exe"

Let me know the results please.



how many shortcuts/files do you have on your desktop?

ok none of that worked. avg remover not in desktop and i followed your steps exactly, i received this message when pasting the last command "not recognized as an internal or external command,operable program or batch file." 21 icons on desktop

are you able to post a screen shot of your desktop for me

thanks

do you remember what you did in post #7 - where you were able to save to the desktop?

http://forums.whatthetech.com/trojan_win32…110#entry600110

i'm not sure what i did. but exe is on my desktop. how do i take a screen shot?

when i try to open exe. it says it's not compatible with my system.