Think Point On Windows7

View previous topic View next topic Go down

Think Point On Windows7

Post by _kerberus on Sun 24 Oct 2010, 12:54 pm

OUT OF NOWERE THIS THING ATTACKS PLEASE HELP REMOVE I HAVE GAINED CONTROL OF THE PC MOSTLY I JUST NEED TO STOP THE YELLOW SCREEN AND REMOVE AND RESET COMP BACK TO NORMAL.

_kerberus

Unborn
Unborn

Posts : 3
Joined : 2010-10-24
Operating System : windows 7

View user profile

Back to top Go down

Re: Think Point On Windows7

Post by Sneakyone on Sun 24 Oct 2010, 12:57 pm

Hi, Welcome to GeekPolice.net!

Please download OTL to your Desktop. (If you already have it downloaded, then just follow the instructions below).
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • Under the Custom Scan box paste this in

    %systemroot%\*. /mp /s
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\system32\*.exe /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    %systemroot%\system32\*.sys
    %systemroot%\system32\drivers\*.dll
    %systemroot%\system32\drivers\*.ini
    %systemroot%\system32\drivers\*.exe
    %SYSTEMDRIVE%\*.*
    %PROGRAMFILES%\*.
    %appdata%\*.*
    netsvcs
    msconfig
    safebootminimal
    safebootnetwork
    activex
    drivers32
    /md5start
    eventlog.dll
    scecli.dll
    netlogon.dll
    cngaudit.dll
    sceclt.dll
    ntelogon.dll
    logevent.dll
    iaStor.sys
    nvstor.sys
    atapi.sys
    IdeChnDr.sys
    viasraid.sys
    AGP440.sys
    vaxscsi.sys
    nvatabus.sys
    viamraid.sys
    nvata.sys
    nvgts.sys
    iastorv.sys
    ViPrt.sys
    eNetHook.dll
    ahcix86.sys
    KR10N.sys
    disk.sys
    nvstor32.sys
    ahcix86s.sys
    nvrd32.sys
    symmpi.sys
    adp3132.sys
    mv61xx.sys
    usbstor.sys
    /md5stop
    CREATERESTOREPOINT
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs


  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) and paste (Edit->Paste) the contents of these files, one at a time


Note: in the event that OTL fails to run, please use alternate download links to try again:

[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]


I'm livin' life in the fast lane.


Sneakyone

Tech Officer
Tech Officer

Posts : 2707
Joined : 2010-01-10
Operating System : Windows 7 Ultimate 64-bit

View user profile http://twitter.com/AVerySneakyone

Back to top Go down

Re: Think Point On Windows7

Post by _kerberus on Sun 24 Oct 2010, 1:07 pm

i ran otl once before without the settings provided is that ok?

_kerberus

Unborn
Unborn

Posts : 3
Joined : 2010-10-24
Operating System : windows 7

View user profile

Back to top Go down

Re: Think Point On Windows7

Post by _kerberus on Sun 24 Oct 2010, 1:24 pm

LOGS

_kerberus

Unborn
Unborn

Posts : 3
Joined : 2010-10-24
Operating System : windows 7

View user profile

Back to top Go down

Re: Think Point On Windows7

Post by Sneakyone on Mon 25 Oct 2010, 4:59 am

Hi,

Please run OTL.exe.

  • Copy the commands with file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

    :OTL
    O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
    O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
    O4:64bit: - HKLM..\Run: [] File not found
    O4 - HKCU..\Run: [uPc+nXMHRhfngcvgJsiv] C:\Users\Jessica.Burch\AppData\Local\Temp\o6wjhsuz.dll ()
    O4 - HKCU..\Run: [uPc+nXMHRhfngpdYJsiv] C:\Users\Jessica.Burch\AppData\Local\Temp\fsgo8hck.dll ()
    O4 - HKCU..\Run: [uPc+nXMHRhfngqUaXms] C:\Users\Jessica.Burch\AppData\Local\Temp\lp5xw.dll ()
    O20 - HKCU Winlogon: Shell - (C:\Users\Jessica.Burch\AppData\Roaming\hotfix.exe) - C:\Users\Jessica.Burch\AppData\Roaming\hotfix.exe File not found
    [2010/10/23 19:53:51 | 000,000,006 | ---- | M] () -- C:\Users\Jessica.Burch\AppData\Roaming\start
    [2010/10/23 19:52:27 | 000,000,006 | ---- | M] () -- C:\Users\Jessica.Burch\AppData\Roaming\completescan
    [2010/10/23 19:45:54 | 000,000,010 | ---- | M] () -- C:\Users\Jessica.Burch\AppData\Roaming\install

    :commands
    [emptytemp]


  • Return to OTL.exe, right click in the "Custom Scans/Fixes" window (under the light green bar) and choose Paste.

  • Click the red Run Fix button.
  • A fix log in Notepad will appear. Copy the contents of the fix log to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTL.exe

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

============

Please download Malwarebytes Anti-Malware from Here.


Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediatly.


I'm livin' life in the fast lane.


Sneakyone

Tech Officer
Tech Officer

Posts : 2707
Joined : 2010-01-10
Operating System : Windows 7 Ultimate 64-bit

View user profile http://twitter.com/AVerySneakyone

Back to top Go down

Re: Think Point On Windows7

Post by Sponsored content Today at 1:03 am


Sponsored content


Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum