Im not sure how to really work myself around this site but i just got rid of ThinkPoint off my computer thank you SO much btw!
But!
now my icons on my desktop and even when i click the start button wont
let me click on anything! There are things that i need for school on my
desktop to get to for some of my classes tomorrow. Its really stressing
me out all of my icons EVERYWHERE look like a little papers with the top
right corner bent with a little picture in the middle of a little
window with three icons on them and everytime i try to click on one it
says,
"C\Users\{MYNAME}\AppData\Roaming\Microsoft\Internet
Explorer\Quick Launch\User Pinned\TaskBar\HPAdvisor.Ink is not valid
Win32 application."
So i press OK.
And it tells me,
"Can't open this item;"
"It might have been moved, renamed, or deleted. Do you want to remove this item?"
and of course i press no because i dont want to remove it, it's obviously important lol.
But how can i/you/we fix it i need help!
This was all sunday night.
Someone
suggested that i download a few things but my computer wont let me
click on ANY icons on my computer at all theres a few things that ive
worked around to be able to get to but there are other things that i
cant get to like microsoft word or power point or the internet for that
matter so if i was able to download it i wouldnt be able to retrieve it
afterwards to actually use it.
:/ help pleeeease?
Im not sure what to do
Im not sure how to really work myself around this site but i just got rid of ThinkPoint off my computer thank you SO much btw!
But!
now my icons on my desktop and even when i click the start button wont
let me click on anything! There are things that i need for school on my
desktop to get to for some of my classes tomorrow. Its really stressing
me out all of my icons EVERYWHERE look like a little papers with the top
right corner bent with a little picture in the middle of a little
window with three icons on them and everytime i try to click on one it
says,
"C\Users\{MYNAME}\AppData\Roaming\Microsoft\Internet
Explorer\Quick Launch\User Pinned\TaskBar\HPAdvisor.Ink is not valid
Win32 application."
So i press OK.
And it tells me,
"Can't open this item;"
"It might have been moved, renamed, or deleted. Do you want to remove this item?"
and of course i press no because i dont want to remove it, it's obviously important lol.
But how can i/you/we fix it i need help!
This was all sunday night.
Someone
suggested that i download a few things but my computer wont let me
click on ANY icons on my computer at all theres a few things that ive
worked around to be able to get to but there are other things that i
cant get to like microsoft word or power point or the internet for that
matter so if i was able to download it i wouldnt be able to retrieve it
afterwards to actually use it.
:/ help pleeeease?
Im not sure what to do
___________
OTL logfile created on: 10/26/2010 8:09:53 PM - Run 1
OTL by OldTimer - Version 3.2.17.1 Folder = C:\Users\TinaMarie\Music\My Music
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 50.00% Memory free
4.00 Gb Paging File | 2.00 Gb Available in Paging File | 59.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 220.20 Gb Total Space | 175.47 Gb Free Space | 79.69% Space Free | Partition Type: NTFS
Drive D: | 12.49 Gb Total Space | 2.09 Gb Free Space | 16.71% Space Free | Partition Type: NTFS
Computer Name: TINAMARIE-PC | User Name: TinaMarie | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
\
\
_______________
Please download and run this tool.
Download
Malwarebytes' Anti-Malware from
HereDouble Click mbam-setup.exe to install the application.
Make sure a checkmark is placed next to Update Malwarebytes'
Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
- If an update is found, it will download and install the latest version.
- Once the program has loaded, select "Perform Quick Scan", then click Scan.
- The scan may take some time to finish,so please be patient.
- When the scan is complete, click OK, then Show Results to view the results.
- Make sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.Post the contents of the MBAM Log.
________________
Please download and run this tool.
Download
Malwarebytes' Anti-Malware from
HereDouble Click mbam-setup.exe to install the application.
Make sure a checkmark is placed next to Update Malwarebytes'
Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
- If an update is found, it will download and install the latest version.
- Once the program has loaded, select "Perform Quick Scan", then click Scan.
- The scan may take some time to finish,so please be patient.
- When the scan is complete, click OK, then Show Results to view the results.
- Make sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.Post the contents of the MBAM Log.
________________
I'm not sure if you needed this one too, but here ya go anyways.
And thanks for the help so far too
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 4968
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
10/27/2010 8:28:15 PM
mbam-log-2010-10-27 (20-28-15).txt
Scan type: Quick scan
Objects scanned: 140820
Time elapsed: 7 minute(s), 2 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Windows\Temp\TMP00000001343D9257E0C852AC (Trojan.Dropper) -> Quarantined and deleted successfully.
_____________________
Hello.
Run ESET Online ScanPlease do an online scan with
ESET Online Scanner. Please use
Internet Explorer as it uses ActiveX.
- Check (tick) this box: YES, I accept the Terms of Use.
- Click on the Start button next to it.
- When prompted to run ActiveX. click Yes.
- You will be asked to install an ActiveX. Click Install.
- Once installed, the scanner will be initialized.
- After the scanner is initialized, click Start.
- Check (tick) Remove found threats box.
- Check (tick) Scan unwanted applications.
- Click on Scan.
- It will start scanning. Please be patient.
- Once the scan is done, the log will be saved here: C:\Program Files\esetonlinescanner\log.txt.
- _____________________C:\Users\TinaMarie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MHOYR6Q2\XvidSetup[1].exe
a variant of Win32/Adware.HotBar.H application
cleaned by deleting - quarantined
C:\Users\TinaMarie\AppData\Local\Temp\nsz798B.tmp\Install.dll
a variant of Win32/Adware.HotBar.E application
cleaned by deleting - quarantined
C:\Users\TinaMarie\Documents\ClickPotatoInstaller.exe
a variant of Win32/Adware.HotBar.H application
cleaned by deleting - quarantined
C:\Users\TinaMarie\Documents\VLCSetup.exe
a variant of Win32/Adware.HotBar.H application
cleaned by deleting - quarantined
C:\Users\TinaMarie\Documents\XvidSetup.exe
a variant of Win32/Adware.HotBar.H application
cleaned by deleting - quarantined
Operating memory
probably a variant of Win32/Adware.180Solutions application
contained infected files
I've
been doing this scan since the day you replied but once the log is
saved my computer wont let me retrieve it, i cant even access any word
doctumets of ANY kind, I'm no sure if this is the Log you need but it's
all i can give you from this scan.
- ___________________________
- Hello.
Download MBRCheck to your desktop.
- Double click MBRCheck.exe to run (Vista and Windows 7 users, right click and select Run as Administrator).
- It will show a black screen with some data on it.
- A report called MBRcheckxxxx.txt will be on your desktop
- Open this report and post its content in your next reply.
- ____________________
- MBRCheck, version 1.2.3
2010, AD
Command-line:
Windows Version: Windows 7 Home Premium Edition
Windows Information: , 64-bit
Base Board Manufacturer: Hewlett-Packard
BIOS Manufacturer: Hewlett-Packard
System Manufacturer: Hewlett-Packard
System Product Name: Compaq Presario CQ60 Notebook PC
Logical Drives Mask: 0x0000001c
\\.C: --> \\.\PhysicalDrive0 at offset 0x00000000'0c800000
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000037'19100000
Size Device Name MBR Status
---------------------------------------------------------------------------------
232 GB \\.\PhysicalDrive0 Unknown MBR code
SHA1: 17DED76FA968BF4760C9E47179B9B43F281EEB90
Found non-standard or infected MBR.
Enter 'Y' and hit ENTER for more options, or 'N' to exit:
I didnt press anything after that and just exited.
- _______________________
- Hello.
Please reboot the the machine, start tapping F8 just as it starts booting.
Is there an option for "Repair Your Computer"?
- _______________________
- Yes, what directions should i choose and should i save my important files before i do this.
Will they get deleted?
- __________________________
- No they wont get deleted, this isn't a format, it's a repair.
Select the repair option, it will ask what OS you want to repair, so select the one we are working one.
Next it will ask how to repair it, one option will be "Command Prompt", select that option.
In the command prompt, type in "bootrec.exe /fixmbr" without the quote marks, notice a space between the e and /
Hit enter, when it says "Operation successful", reboot the machine then re-run MBRCheck and post the new log.
- _____________________
Sun Feb 19, 2012 2:15 pm by محمد السعيد الجيوشي
Subject: Got the ThinkPoint virus out BUT! 
