Unsolved
This post is more than 5 years old
39 Posts
0
7334
November 18th, 2010 09:00
thinkpoint with mshta.exe virus
i was in facebook had some thinkpoint program open tried to stop it an i might have got it off with lava soft but even tho thinkpoint looks to be gone i have mshta.exe in tskmgr, it will have at times 20 of them running,,,ive tried to restore back to last week,,didnt fix it,,ive ran a few scans but im lost,,now all i can do is boot to safemode with networkin because if i do normal boot my desktop is blank,,,it will not let me open tskmgr or anything,i do have another clean computer(backup) that i am trying to use to fix my main pc,,,i am new here an i do not know how to post a hijack log,,is there a way to run a hijack in safemode an transfer to usb to load here, if someone could please help me id be most greatful.
Bugbatter
4 Apprentice
•
20.5K Posts
0
November 18th, 2010 10:00
Latest versions of Thinkpoint involve a master boot record rootkit. Ad-aware won't touch it. Don't bother with Hijackthis at this point.
What anti-virus were you running when this happened? What operating system?
By the way, unless you clicked on a link to a malware downloader in Facebook, it did not come from Facebook.
moonsaker
39 Posts
0
November 18th, 2010 12:00
i have xp pro
ok,, i had avg but what ever this is killed it ,also i thought it came from facebook cuz that is what i had open when this all happened,, i know i prolly wasnt pose to do anything i see on other threads but i did,,,i got the mbam, ran it an it found like 16 things it fixed those an now i have my desktop back,,, now that it is back i am rerunnin mbam to see if it finds more...mshta.exe is still in tskmgr but i ended tsk on it...,
i have been lazy an have not backed up my stuff so i am hopin not to loose this,,the only thing im worried about is the photos i have of my family,,do u think i have a chance to save them?
Bugbatter
4 Apprentice
•
20.5K Posts
0
November 18th, 2010 12:00
As long as you have your desktop back, see if you can save your photos to a CD, now -- just in case there is a problem later.
Please go to the Malware Removal Forum. and post BOTH your MBAM logs.Include details on exactly how that system is behaving now. No, you did not get it from Facebook. Unless you clicked on a bad link, most likely it was a site that you visited prior to being on Facebook.
Please do not follow instructions posted for someone else in that forum. AVG conflicts with some of our tools and you could make matters worse.
moonsaker
39 Posts
0
November 18th, 2010 12:00
ok i will post the logs..its still runnin an been runnin for 40 mins an has found 2 more,,im goin to try to burn my pics...also my avg is dead i think,,so if it needs to be uninstalled it can be..