Working on two computers at once the other evening and up pops XP Recovery asking to start scan. And I started the scan, like a fool. Avast immediatley notified that there was a problem, after I started the scan…too late. unable to see any of my programs in the start menu.
I have read your posts and ran mbam and then OTS. Mbam located and stated it deleted the pum.hijack.taskmanager.
Thank you in advance for your help
Malwarebytes’ Anti-Malware 1.51.0.1200 www.malwarebytes.org
Database version: 6858
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
It appears that your files and folders are hidden - lets see if we can recover them for you
Start OTS. Copy/Paste the information in the quotebox below into the panel where it says “Paste fix here” and then click the Run Fix button.
[Unregister Dlls]
[Files/Folders - Modified Within 30 Days]
NY -> ~17162020r -> C:\Documents and Settings\All Users\Application Data\~17162020r
NY -> ~17162020 -> C:\Documents and Settings\All Users\Application Data\~17162020
NY -> 17162020 -> C:\Documents and Settings\All Users\Application Data\17162020
[Files - No Company Name]
NY -> ~17162020r -> C:\Documents and Settings\All Users\Application Data\~17162020r
NY -> ~17162020 -> C:\Documents and Settings\All Users\Application Data\~17162020
NY -> 17162020 -> C:\Documents and Settings\All Users\Application Data\17162020
[Custom Items]
:files
attrib -H c:\*.* /s /d /c
:end
[EmptyFlash]
[CreateRestorePoint]
The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. Click the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here
I will review the information when it comes back in.
Depending on what the fix contains, this process may take some time and your desktop icons might disappear or other uncommon behavior may occur.
[*]Quit all running programs
[*]For Vista/Seven, right click → run as administrator, for XP simply run RogueKiller.exe
[*]When prompted, type 6 and validate
[]The RKreport.txt shall be generated next to the executable.
[]If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe
Please post the contents of the RKreport.txt in your next Reply.
Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: Shortcuts HJfix – Date : 06/14/2011 23:45:45
Under the start menu I can see my Programs but when I choose them and drill down it shows up as , not allowing me to choose the executable tht would normally be there.
This next one will produce the necessary shortcut links which you can cut and paste into the start menu folder http://cid-32d8666f4048075b.office.live.com/self.aspx/Malware%20files/Repair.vbs
From the above link download the repair.vbs file to your destop
Run the repair.vbs
It will ask for a folder name call it recovery
The tool will let you know when it is finished
On the desktop will be a recovery folder
Open the folder
Cut and Paste the links that you want to C:\documents and settings[i]your name[/i]\start menu
Thanks for the fix. You have been a big help. It will take a little bit to rename the shortcuts but it’s a lot better than reloading windows and the programs.
