Do this on the computer you are posting from:
Copy the text in the codebox below:
Code:
:OTL
IE - HKU\Owner_ON_C\..\URLSearchHook: {37153479-1976-43c3-a1ee-557513977b64} - Reg Error: Key error. File not found
IE - HKU\Owner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\Owner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:56364
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O4 - HKLM..\Run: [0B8.exe] C:\Program Files (x86)\LP\3D92\0B8.exe ()
O4 - HKU\Owner_ON_C..\Run: [WinRAR Update] C:\Users\Owner\AppData\Local\Conduit\ConduitUpdate\Conduitup.DLL (Windows (R) 2000 DDK provider)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (Reg Error: Value error.)
O20 - HKU\Owner_ON_C Winlogon: Shell - (C:\Users\Owner\AppData\Roaming\20D84\FD93D.exe) - C:\Users\Owner\AppData\Roaming\20D84\FD93D.exe ()
O36 - AppCertDlls: dvdppubw - (C:\Windows\system32\igxpgman64.dll) - C:\Windows\SysWow64\igxpgman64.dll File not found
O36 - AppCertDlls: Fireeown - (C:\Windows\system32\igxpgman.dll) - C:\Windows\SysWOW64\igxpgman.dll ()
[2011/11/05 14:16:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\84716
[2011/11/05 14:16:02 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\20D84
[2011/11/03 19:13:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BF43E
[2011/11/03 19:13:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LP
[2011/11/03 19:13:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\532BF
[1 C:\Users\Owner\Desktop\*.tmp files -> C:\Users\Owner\Desktop\*.tmp -> ]
[2011/11/02 19:50:24 | 000,060,416 | -H-- | M] () -- C:\Windows\System32\igxpgman64.dll
[2011/11/02 19:50:24 | 000,053,248 | -H-- | M] () -- C:\Windows\SysWow64\igxpgman.dll
:Services
:Reg
:Files
:Commands
[purity]
Open Notepad and paste it.
Save the document as Fix.txt on to a USB flash drive
On the infected computer the following...
Run OTLPE
- Insert USB stick and find the file Fix.txt. Drag the file Fix.txt and drop it under the Custom Scans/Fixes box at the bottom.
- (The content of Fix.txt should appear in the box)
- Then click the Run Fix button at the top
- Let the program run unhindered, reboot the PC when it is done
- Post the log produced (you'll need to transfer it with USB stick)
- Attempt to reboot normally into Windows.
