Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Ransomeware ICE CCC
Message
<blockquote data-quote="g3n-h@ckm@n" data-source="post: 170966" data-attributes="member: 19510"><p>ok ,do that with another computer</p><p></p><p>Download here: <a href="http://www.telecharger.sosvirus.net/gen-hackman/7pe_x___86_E.exe" target="_blank">http://www.telecharger.sosvirus.net/gen-hackman/7pe_x___86_E.exe</a></p><p>Select whether you want to create a <strong>Live CD</strong> or <strong>Live USB Key.</strong></p><p>===============================</p><p>If you choose CD:</p><p>Wait a few seconds, writing software will open.</p><p>Insert a CD into your drive and click <strong>"BURN ISO"</strong></p><p>(Normally the file to burn is already selected)</p><p>if USB:</p><p>insert a USB key in a holder (minimum 512 MB)</p><p>The installation may take 1-2 minutes</p><p>Iso to USB opens, click on "Browse" and selects "Win7Rescue.iso" that is placed on your desktop.</p><p>choose the corresponding letter to your usb key below, and leave the default file system.</p><p>checks the "Bootable" box, then click burn, then answer "yes" to the following two messages.</p><p>a window will warn you that the operation was successful.</p><p>Once completed, ejects the key PC and then inserted into the diseased pc.</p><p>===================================</p><p>You will need a wired keyboard (not wireless) not working on the bios</p><p>Then change the startup of your PC by putting the patient first boot cd in the bios</p><p>How to? : <a href="http://translate.google.com/translate?sl=fr&tl=en&js=n&prev=_t&hl=fr&ie=UTF-8&u=http%3A%2F%2Fwww.commentcamarche.net%2Ffaq%2F7322-booter-sur-cd-changer-sequence-de-boot" target="_blank">http://translate.google.com/translate?sl=fr&tl=en&js=n&prev=_t&hl=fr&ie=UTF-8&u=http://www.commentcamarche.net/faq/7322-booter-sur-cd-changer-sequence-de-boot</a></p><p>Start the patient on the pc cd or usb key</p><p>Lets make up the full desktop display</p><p></p><p>Logically FirefoxPortable let you come and read here to take the script to paste which is below</p><p></p><p>Start <strong>OTLPE.exe</strong> that is on your desktop:</p><p>Select the window that opens, the corresponding installation folder to the patient Windows <strong>(C: \ windows</strong> or <strong>d: \ windows</strong> or ...): click on the Windows folder and then click <strong>ok</strong></p><p>To the question <strong>"Do you wish to load remote user profile (s) for scanning? "=></strong> Yes</p><p>Select <strong>"Automatically Load All Remaining Users box? "And</strong> click <strong>OK</strong></p><p>OTLPE opens ... Just put the 4 boxes on the left to "All" and do not touch anything else.</p><p></p><p></p><p>In the box under <strong>"Custom Scans / Fixes"</strong> paste this text:</p><p></p><p></p><p><strong>HKCU\Software</strong></p><p><strong>HKLM\SoftwareHKCU\Software\Microsoft\Command Processor / s </strong></p><p><strong>HKLM\Software\Microsoft\Command Processor / s </strong></p><p><strong>%Homedrive%\* </strong></p><p><strong>%Homedrive%\*.</strong></p><p><strong>%USERPROFILE%\*</strong></p><p><strong>%USERPROFILE%\*. </strong></p><p><strong>%ALLUSERSPROFILE%\* </strong></p><p><strong>%ALLUSERSPROFILE%\*. </strong></p><p><strong>%LocalAppData%\* </strong></p><p><strong>%LocalAppData%\*.</strong></p><p>%<strong>UserProfile%\Local Settings\Application Data\* </strong></p><p><strong>%UserProfile%\Local Settings\Application Data\*.</strong></p><p><strong>%PROGRAMFILES%\* </strong></p><p><strong>%ProgramFiles%\Google\Desktop\Install / s </strong></p><p><strong>%PROGRAMFILES%\*. </strong></p><p><strong>%Systemroot%\Installer\*.</strong></p><p><strong>%Systemroot%\Temp\*.Exe / s </strong></p><p><strong>%Systemroot%\system32\*.Dll /<strong>lockedfiles </strong></strong></p><p><strong>%Systemroot%\system32\*.Exe /lockedfiles%Systemroot%\system32\*.In* </strong></p><p><strong>%Systemroot%\Tasks\* </strong></p><p><strong>%Systemroot%\Tasks\*. </strong></p><p><strong>%Systemroot%\system32\Tasks\* </strong></p><p><strong>%Systemroot%\system32\Tasks\*.</strong></p><p><strong>%Systemroot%\system32\drivers\*.<strong>Sy</strong>* /lockedfiles</strong></p><p><strong>%Systemroot%\system32\config\*.Exe / s</strong></p><p><strong>%Systemroot%\ServiceProfiles\*.Exe / s </strong></p><p><strong>%Systemroot%\system32\*.Sys msconfig </strong></p><p><strong>activex</strong></p><p><strong>/Md5start </strong></p><p><strong>explorer.exe </strong></p><p><strong>winlogon.exe </strong></p><p><strong>wininit.exe </strong></p><p><strong>volsnap.sys </strong></p><p><strong>atapi.sys </strong></p><p><strong>ndis.sys </strong></p><p><strong>cdrom.sys </strong></p><p><strong>i8042prt.sys</strong></p><p><strong>iastor.sys </strong></p><p><strong>tdx.sys</strong></p><p><strong>netbt.sys </strong></p><p><strong>afd.sys </strong></p><p><strong>/Md5stop </strong></p><p><strong>netsvcs</strong></p><p><strong>safebootminimal </strong></p><p><strong>safebootnetwork</strong></p><p></p><p>Click <strong>Analysis.</strong></p><p>At the end of the scan, two Notepad will open with the report and <strong>OTL.txt extra.txt</strong></p><p>Host them one by one on <a href="http://cjoint.com" target="_blank">http://cjoint.com</a> then give the two links found on the forum or in the discussion where you made help.</p><p>They are also at the root of the partition where Windows is installed (C: \ OTL.txt ... or D: \ OTL.txt .... and the accompanying Extra)</p></blockquote><p></p>
[QUOTE="g3n-h@ckm@n, post: 170966, member: 19510"] ok ,do that with another computer Download here: [url]http://www.telecharger.sosvirus.net/gen-hackman/7pe_x___86_E.exe[/url] Select whether you want to create a [B]Live CD[/B] or [B]Live USB Key.[/B] =============================== If you choose CD: Wait a few seconds, writing software will open. Insert a CD into your drive and click [B]"BURN ISO"[/B] (Normally the file to burn is already selected) if USB: insert a USB key in a holder (minimum 512 MB) The installation may take 1-2 minutes Iso to USB opens, click on "Browse" and selects "Win7Rescue.iso" that is placed on your desktop. choose the corresponding letter to your usb key below, and leave the default file system. checks the "Bootable" box, then click burn, then answer "yes" to the following two messages. a window will warn you that the operation was successful. Once completed, ejects the key PC and then inserted into the diseased pc. =================================== You will need a wired keyboard (not wireless) not working on the bios Then change the startup of your PC by putting the patient first boot cd in the bios How to? : [URL='http://translate.google.com/translate?sl=fr&tl=en&js=n&prev=_t&hl=fr&ie=UTF-8&u=http%3A%2F%2Fwww.commentcamarche.net%2Ffaq%2F7322-booter-sur-cd-changer-sequence-de-boot']http://translate.google.com/translate?sl=fr&tl=en&js=n&prev=_t&hl=fr&ie=UTF-8&u=http://www.commentcamarche.net/faq/7322-booter-sur-cd-changer-sequence-de-boot[/URL] Start the patient on the pc cd or usb key Lets make up the full desktop display Logically FirefoxPortable let you come and read here to take the script to paste which is below Start [B]OTLPE.exe[/B] that is on your desktop: Select the window that opens, the corresponding installation folder to the patient Windows [B](C: \ windows[/B] or [B]d: \ windows[/B] or ...): click on the Windows folder and then click [B]ok[/B] To the question [B]"Do you wish to load remote user profile (s) for scanning? "=>[/B] Yes Select [B]"Automatically Load All Remaining Users box? "And[/B] click [B]OK[/B] OTLPE opens ... Just put the 4 boxes on the left to "All" and do not touch anything else. In the box under [B]"Custom Scans / Fixes"[/B] paste this text: [B]HKCU\Software HKLM\SoftwareHKCU\Software\Microsoft\Command Processor / s HKLM\Software\Microsoft\Command Processor / s %Homedrive%\* %Homedrive%\*. %USERPROFILE%\* %USERPROFILE%\*. %ALLUSERSPROFILE%\* %ALLUSERSPROFILE%\*. %LocalAppData%\* %LocalAppData%\*.[/B] %[B]UserProfile%\Local Settings\Application Data\* %UserProfile%\Local Settings\Application Data\*. %PROGRAMFILES%\* %ProgramFiles%\Google\Desktop\Install / s %PROGRAMFILES%\*. %Systemroot%\Installer\*. %Systemroot%\Temp\*.Exe / s %Systemroot%\system32\*.Dll /[B]lockedfiles [/B] %Systemroot%\system32\*.Exe /lockedfiles%Systemroot%\system32\*.In* %Systemroot%\Tasks\* %Systemroot%\Tasks\*. %Systemroot%\system32\Tasks\* %Systemroot%\system32\Tasks\*. %Systemroot%\system32\drivers\*.[B]Sy[/B]* /lockedfiles %Systemroot%\system32\config\*.Exe / s %Systemroot%\ServiceProfiles\*.Exe / s %Systemroot%\system32\*.Sys msconfig activex /Md5start explorer.exe winlogon.exe wininit.exe volsnap.sys atapi.sys ndis.sys cdrom.sys i8042prt.sys iastor.sys tdx.sys netbt.sys afd.sys /Md5stop netsvcs safebootminimal safebootnetwork[/B] Click [B]Analysis.[/B] At the end of the scan, two Notepad will open with the report and [B]OTL.txt extra.txt[/B] Host them one by one on [url]http://cjoint.com[/url] then give the two links found on the forum or in the discussion where you made help. They are also at the root of the partition where Windows is installed (C: \ OTL.txt ... or D: \ OTL.txt .... and the accompanying Extra) [/QUOTE]
Insert quotes…
Verification
Post reply
Top