WiredWX Christian Hobby Weather Tools
Would you like to react to this message? Create an account in a few clicks or log in to continue.

WiredWX Christian Hobby Weather ToolsLog in

 


MS Removal Tool Problem

3 posters

descriptionMS Removal Tool Problem - Page 2 EmptyRe: MS Removal Tool Problem23rd August 2011, 10:30 pm

more_horiz
Winlogon


! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
AutoRestartShell REG_DWORD 0x1
DefaultDomainName REG_SZ TERESA-6ADA04CE
DefaultUserName REG_SZ teresa
LegalNoticeCaption REG_SZ
LegalNoticeText REG_SZ
PowerdownAfterShutdown REG_SZ 0
ReportBootOk REG_SZ 1
Shell REG_SZ Explorer.exe
ShutdownWithoutLogon REG_SZ 0
System REG_SZ
Userinit REG_SZ C:\WINDOWS\system32\userinit.exe,
VmApplet REG_SZ rundll32 shell32,Control_RunDLL "sysdm.cpl"
SfcQuota REG_DWORD 0xffffffff
allocatecdroms REG_SZ 0
allocatedasd REG_SZ 0
allocatefloppies REG_SZ 0
cachedlogonscount REG_SZ 10
forceunlocklogon REG_DWORD 0x0
passwordexpirywarning REG_DWORD 0xe
scremoveoption REG_SZ 0
AllowMultipleTSSessions REG_DWORD 0x1
UIHost REG_EXPAND_SZ logonui.exe
LogonType REG_DWORD 0x1
Background REG_SZ 0 0 0
DebugServerCommand REG_SZ no
SFCDisable REG_DWORD 0x0
WinStationsDisabled REG_SZ 0
HibernationPreviouslyEnabled REG_DWORD 0x1
ShowLogonOptions REG_DWORD 0x0
AltDefaultUserName REG_SZ teresa
AltDefaultDomainName REG_SZ TERESA-6ADA04CE
LegalNotice Text REG_SZ
ChangePasswordUseKerberos REG_DWORD 0x1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Credentials

descriptionMS Removal Tool Problem - Page 2 EmptyRe: MS Removal Tool Problem23rd August 2011, 10:33 pm

more_horiz
Please download OTM

  • Save it to your desktop.
  • Please double-click OTM to run it. (Note for Vista: Right-click on the file and choose Run As Administrator).
  • Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL C (or, after highlighting, right-click and choose Copy):

    Code:

    :files
    c:\windows\tasks\at*.job


    :reg
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "iscpaxneweheclxv"=-
    "bipro"=-
    "Fxehedox"=-

    :Commands
    [emptytemp]
    [purity]
    [Reboot]


  • Return to OTM, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
  • Click the red Moveit! button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTM and reboot your PC.

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and
open the newest .log file present, and copy/paste the contents of that document back here in your next post.

descriptionMS Removal Tool Problem - Page 2 EmptyRe: MS Removal Tool Problem23rd August 2011, 10:59 pm

more_horiz
All processes killed
========== FILES ==========
c:\windows\tasks\At1.job moved successfully.
c:\windows\tasks\At198.job moved successfully.
c:\windows\tasks\At199.job moved successfully.
c:\windows\tasks\At2.job moved successfully.
c:\windows\tasks\At200.job moved successfully.
c:\windows\tasks\At201.job moved successfully.
c:\windows\tasks\At202.job moved successfully.
c:\windows\tasks\At203.job moved successfully.
c:\windows\tasks\At204.job moved successfully.
c:\windows\tasks\At205.job moved successfully.
c:\windows\tasks\At206.job moved successfully.
c:\windows\tasks\At207.job moved successfully.
c:\windows\tasks\At208.job moved successfully.
c:\windows\tasks\At209.job moved successfully.
c:\windows\tasks\At210.job moved successfully.
c:\windows\tasks\At211.job moved successfully.
c:\windows\tasks\At212.job moved successfully.
c:\windows\tasks\At213.job moved successfully.
c:\windows\tasks\At214.job moved successfully.
c:\windows\tasks\At215.job moved successfully.
c:\windows\tasks\At216.job moved successfully.
c:\windows\tasks\At217.job moved successfully.
c:\windows\tasks\At218.job moved successfully.
c:\windows\tasks\At219.job moved successfully.
c:\windows\tasks\At220.job moved successfully.
c:\windows\tasks\At221.job moved successfully.
c:\windows\tasks\At3.job moved successfully.
c:\windows\tasks\At4.job moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\iscpaxneweheclxv deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\bipro deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Fxehedox deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56466 bytes

User: LocalService
->Temp folder emptied: 65748 bytes
->Temporary Internet Files folder emptied: 835986 bytes
->Flash cache emptied: 1976 bytes

User: NetworkService
->Temp folder emptied: 394578 bytes
->Temporary Internet Files folder emptied: 6717574 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 61406 bytes

User: teresa
->Temp folder emptied: 32420409 bytes
->Temporary Internet Files folder emptied: 27046865 bytes
->Java cache emptied: 6746979 bytes
->Flash cache emptied: 1168 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 90899633 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 39647188 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 4297 bytes

Total Files Cleaned = 195.00 mb


OTM by OldTimer - Version 3.1.18.0 log created on 08232011_184328

Files moved on Reboot...

Registry entries deleted on Reboot...
(Is this what you mean?)

descriptionMS Removal Tool Problem - Page 2 EmptyRe: MS Removal Tool Problem24th August 2011, 1:48 am

more_horiz
Good. How is your computer running?

descriptionMS Removal Tool Problem - Page 2 EmptyRe: MS Removal Tool Problem24th August 2011, 9:51 pm

more_horiz
it seems fine currently Thank You!

(should ask this now, If another problem occurs should i just post in this topic of should i start a new one?)

descriptionMS Removal Tool Problem - Page 2 EmptyRe: MS Removal Tool Problem26th August 2011, 12:36 am

more_horiz
Start a new one please. Smile...

See this page for more info about malware and prevention.

descriptionMS Removal Tool Problem - Page 2 EmptyRe: MS Removal Tool Problem

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum