Hey guys I have a rouge av (AGAIN -.-)
So if anyone wants to help me out that would be great
I have to stop watching porn -.-
So if anyone wants to help me out that would be great
I have to stop watching porn -.-
:OTL
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O33 - MountPoints2\{20a606ce-770c-11df-8006-0015c5692895}\Shell - "" = AutoRun
O33 - MountPoints2\{20a606ce-770c-11df-8006-0015c5692895}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{20a606ce-770c-11df-8006-0015c5692895}\Shell\AutoRun\command - "" = "H:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{339eba0c-9433-11df-801b-0015c5692895}\Shell - "" = AutoRun
O33 - MountPoints2\{339eba0c-9433-11df-801b-0015c5692895}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{339eba0c-9433-11df-801b-0015c5692895}\Shell\AutoRun\command - "" = G:\LaunchU3.exe
O33 - MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell\AutoRun\command - "" = E:\setup.exe
O33 - MountPoints2\{854c2343-e77c-11df-8046-0015c5692895}\Shell - "" = AutoRun
O33 - MountPoints2\{854c2343-e77c-11df-8046-0015c5692895}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{854c2343-e77c-11df-8046-0015c5692895}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RONzRIdEr.Exe
O33 - MountPoints2\{c1eb0ca4-0d9b-11de-bfbc-0015c5692895}\Shell - "" = AutoRun
O33 - MountPoints2\{c1eb0ca4-0d9b-11de-bfbc-0015c5692895}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{c1eb0ca4-0d9b-11de-bfbc-0015c5692895}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O35 - HKCU\..exefile [open] -- "C:\Documents and Settings\Reuben E. Rojas\Local Settings\Application Data\cha.exe" -a "%1" %* ()
O36 - AppCertDlls: cmdltray - (C:\WINDOWS\system32\drivvaws.dll) - File not found
O37 - HKCU\...exe [@ = exefile] -- "C:\Documents and Settings\Reuben E. Rojas\Local Settings\Application Data\cha.exe" -a "%1" %* ()
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B4227B4
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:07BF512B
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
:Files
C:\Documents and Settings\Reuben E. Rojas\Local Settings\Application Data\cha.exe
:Commands
[purity]
[emptytemp]
[resethosts]