ThinkPoint Removal Help

[capshockey29]

Either yesterday or two days ago I was trying to access a word file for a school project on a flash drive. When I tried to open the flash drive, a prompt came up from windows blocking usbd.exe. I blocked it a few times but was unable to access my flash drive. So I unblocked the application think it was preventing me from accessing my flash drive. After I unblocked it, I was able to access the files on my flash drive. The only files I have on this flash drive are word documents.

This morning when I wake up my computer loads up a prompt from "Windows Security Essentials" prompting me to connect online to remove a virus. Being suspicious I did not accept. I was unable to get this window to go away so I disabled my wireless card and accepted the online scan to see if it would go away knowing it could not connect to the internet.

I immediately booted into safemode and ran a spybot search. It found and fixed Win32.Muollo. It also fixed C:\Documents and Settings\Adminstrator\Application Data\Koydix\myog.exe. Myog.exe is also in autorun start up program. When I ran my computer in normal windows the virus was still there.

When I tried to reboot in safemode again ThinkPoint starts up immediately. If I kill the program my computer won't load up. This is why I have not ran a DDS yet because I cannot access those resources. If someone could help that would be awesome and I am very grateful for you taking your time out and reading this post. Let me know if I can be of any other assistance.

Thanks,
James

[ken545]

:snwelcome:


Please read Before You Post (http://forums.spybot.info/showthread.php?t=288)
While best efforts are made to assist in removing infections safely, unexpected stuff can happen. It is advisable that you back up your important data before starting any clean up procedure. Neither Safer Networking Forums nor the Analyst providing the advice may be held responsible for any loss.

Until we deem your system clean I am going to ask you not to install or uninstall any software or hardware except for the programs we may run.


Thinkpoint is a rogue program that your infected with.



Please download Malwarebytes from Here (http://www.malwarebytes.org/mbam-download.php) or Here (http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html)


Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform quick scan, then click Scan.
http://i24.photobucket.com/albums/c30/ken545/MBAMCapture.jpg
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected .
When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.
Post the report please





Download OTL (http://oldtimer.geekstogo.com/OTL.exe) to your Desktop

Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
Click on Minimal Output at the top
Download the following file scan.txt to your Desktop. Click here to download it (http://www.geekstogo.com/forum/files/download/395-otl-custom-scan-file-scantxt/). You may need to right click on it and select "Save"
Double click inside the Custom Scan box at the bottom
A window will appear saying "Click OK to load a custom scan from a file or Cancel to cancel"
Click the OK button and navigate to the file scan.txt which we just saved to your desktop
Select scan.txt and click Open. Writing will now appear under the Custom Scan box
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan won't take long.

When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic




Post both logs please

[ken545]

Due to inactivity, this thread will now be closed.

If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a new DDS log with a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.