Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

word files extension changes to .ognrivi


  • This topic is locked This topic is locked
13 replies to this topic

#1 pmbhome

pmbhome

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:23 PM

Posted 06 February 2015 - 03:03 PM

Suddenly yesterday my all word files extension changed to .docx.ognrivi.

Upon removing .ognrivi and double clicking, it says invalid format.

 

Any solution on it as tried scanning through avast, nd, kaspersky but still same.

 

Any solution

 

Rgds

 



BC AdBot (Login to Remove)

 


m

#2 olgun52

olgun52

  • Malware Response Team
  • 3,778 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:01:23 AM

Posted 06 February 2015 - 05:30 PM

Hello pmbhome and Welcome to the BleepingComputer. :welcome:  
 
My name is Yılmaz and I'll help you with the cleanup of malware from your computer.

Before we move on, please read the following points carefully.

  • Please complete all steps in the specified order.
  • Even if tools don't find malware, I want you to post the logfiles anyway.
  • Please copy and paste the logfiles directly into your posts. Please do not attach them unless you are instructed to do so.
  • Read the instructions carefully. If you have problems, stop what you  were doing and describe the problems you encountered as precisely as  you can.
  • Don't install or uninstall software during the cleanup unless you are told to do so.
  • If you can't answer for the next few days, please let me know. If  you haven't answered within 5 days, I am assuming that you don't need  help anymore and your topic will be closed.
  • I can not guarantee that we will find and be able to remove all  malware. The cleaning process is not instant. Please continue to review  my answers until I tell you that your computer is clean
  • Please reply to this thread. Do not start a new topic
  • As my first language is not English, please do not use slang or idioms. It could be hard for me to understand.
  • Please open as administrator  the computer. How is open as administrator  the computer?
  • Disable your AntiVirus and AntiSpyware applications, as they will  interfere with our tools and the removal. If you are unsure how to do  this, please refer to get help here

Thanks
---------------------------------------------------------------------------------------------------------
 
Please do the following.
 
Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

:hello:
 
Sincerely


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#3 olgun52

olgun52

  • Malware Response Team
  • 3,778 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:01:23 AM

Posted 09 February 2015 - 03:21 PM

Hello pmbhome,

 

3 Day Inactivity
This is the third day since my last post. Are you still there?
If you need more time, just let me know.
If you do not post within 48 hours, this thread will be closed due to inactivity.

 

 

 


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#4 pmbhome

pmbhome
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:23 PM

Posted 09 February 2015 - 04:02 PM

I m working on ur solution as the problem is on our ship and will reply with the requested files in a day or two when i visit the ship.

 

Rgds

 



#5 olgun52

olgun52

  • Malware Response Team
  • 3,778 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:01:23 AM

Posted 09 February 2015 - 04:15 PM

Welcome Back! i am waiting


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#6 pmbhome

pmbhome
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:23 PM

Posted 10 February 2015 - 05:45 AM

Hi
 
pls find attached requested files

 

Rgds

PmbhomeAttached File  Addition.txt   26.72KB   2 downloadsAttached File  FRST.txt   36.65KB   2 downloads



#7 olgun52

olgun52

  • Malware Response Team
  • 3,778 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:01:23 AM

Posted 10 February 2015 - 11:40 AM

Hello pmbhome,
 
Please be sure to run our tools with administrator rights.
 
ComboFix run:
 
* IMPORTANT : 1   Place ComboFix.exe on your Desktop
* IMPORTANT : 2   Ensure your external and/or USB drives are inserted during the scan

Next, download ComboFix Save to the Desktop

  • Disable all antivirus and antispyware programs. Get help here
  • Now, close all open windows
  • Double-click combofix.exe to run the program
  • Follow the prompts.
  • If the option is offered, it is in your best interest to allow the download and install of the Recovery Console when prompted.
  • When told that the RC is installed correctly, press YES to continue scanning for malware.
  • ComboFix will run. Please don't click on the window while the program is running, it may cause your system to stall.
  • CF may reboot the computer and resume running when it restarts.
  • When finished, a log, ComboFix.txt, is produced.

Please provide the contents of the ComboFix report in your reply.
 
Have a nice day.


Edited by olgun52, 09 April 2015 - 06:11 PM.

Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#8 pmbhome

pmbhome
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:23 PM

Posted 11 February 2015 - 06:17 AM

Gd day,

 

Pls find attached combofix.log.

Is it done or any further procedure requiredAttached File  Combofix.txt   18.61KB   1 downloads



#9 olgun52

olgun52

  • Malware Response Team
  • 3,778 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:01:23 AM

Posted 11 February 2015 - 03:30 PM

Ensure your external and/or USB drives are inserted during the scan ?


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#10 olgun52

olgun52

  • Malware Response Team
  • 3,778 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:01:23 AM

Posted 11 February 2015 - 04:26 PM

Hi pmbhome,

 

Uninstalling a Program using Add/Remove Program

I recommend the uninstalling of the below listed program(s).

  • Press windows key Windows_Logo_key.gif + r on your keyboard at the same time
  • Type appwiz.cpl and press Enter
  • A list of installed programs will be displayed
  • Uninstall the following by clicking on the program(s) below (and any other similar names) and selecting Remove or Uninstall

Yontoo
BabylonObjectInstaller

  • Reboot your computer

---------------------------------------------------------------------------------------------------------------------------------

Insert the USB memory and external disc on your computer
 
Step 1:
 
Combofix scripting
1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
3. Download the attached CFScript.txt and save it to the location where Combofix is.

CFScriptB-4.gif

Refering to the picture above, drag CFScript into ComboFix.exe
When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.
 
Step 2:
 
FRST Script:
Ensure your external and/or USB drives are inserted during the scan
 
Please download this attached txt.gif  fixlist.txt   11.35KB   0 downloads and save it in the same directory as FRST.

  • Start FRST with Administrator privileges.
  • Press the Fix button.
  • When finished, a log file (Fixlog.txt) pops up and is saved to the same location the tool was run from.
    Please copy and paste its contents in your next reply.

Step 3:

 

Chrome: Backup Chrome Bookmarks

Chrome: Chrome - Reset browser settings

 

Have a  great day.

 

Attached Files


Edited by olgun52, 11 February 2015 - 05:18 PM.

Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#11 olgun52

olgun52

  • Malware Response Team
  • 3,778 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:01:23 AM

Posted 14 February 2015 - 06:59 PM

Hello pmbhome,

 

3 Day Inactivity

This is the third day since my last post. Are you still there?

If you need more time, just let me know.

If you do not post within 48 hours, this thread will be closed due to inactivity.


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#12 pmbhome

pmbhome
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:23 PM

Posted 16 February 2015 - 04:29 AM

Ya im there

 

Actually i m out of internet range



#13 olgun52

olgun52

  • Malware Response Team
  • 3,778 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:01:23 AM

Posted 22 February 2015 - 07:59 AM

When Internet access, please write to me.


Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 


#14 olgun52

olgun52

  • Malware Response Team
  • 3,778 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:01:23 AM

Posted 22 February 2015 - 07:59 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.al Message (PM) that you would like this topic re-opened.


Edited by olgun52, 22 February 2015 - 08:02 AM.

Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users