Hello again
Please
download OTMoveIt3 by OldTimer.
Save it to your
desktop.
Double-click on OTMoveIt3.exe
Using notepad copy the lines in the codebox below:
Quote:
:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CPM57bdb8af"=-
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4}"= -
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"SSODL"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=""
:Files
c:\windows\system32\bibijiwo.dll
C:\WINDOWS\system32\wadetaro.dll
:commands
[emptytemp]
|
Return to OTMoveIt3, right click in the
"Paste Instructions for Items to be Moved" window (under the yellow bar) and choose
Paste.
Click the red
Moveit! button.
Copy everything in the Results window (under the green bar), and paste it in your next reply.
Close OTMoveIt3
==========
Download Malwarebytes ' Anti-Malware from
Here or
Here Double-click on
mbam-setup.exe to install the application.
* Make sure a
checkmark is placed next to
Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click
Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select
Perform Full Scan, then click Scan.
* The scan may take some time to finish, so please be patient.
* When the scan is complete,
click OK, then
Show Results to view the results.
* Make sure that everything is
checked, and click
Remove Selected.
* When disinfection is completed, a log will open in Notepad and you may be prompted to restart (see Extra Note below).
* The log is automatically
saved by MBAM and can be viewed by clicking the
Logs tab in
MBAM.
* Copy & paste the entire report into your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.
==========
Run RSIT again and post the log.txt in you`re reply.
==========
Logs Required
OTMoveIt3.txt
MBAM.txt
log.txt
How is your system running.