"Can not find script file "C:\Documents and Settings\Owner\Local Settings\Temp\.tt2.tmp.vbs"

Discussion in 'Windows - Virus and spyware problems' started by Athey, Aug 2, 2008.

  1. Athey

    Athey Member

    Joined:
    Aug 2, 2008
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    11
    I know there is another thread with this exact problem, and I read the steps the user posted to do. My only problem is, is that my problem has escalated to the point where I can't open up a lot of my programs, including Hijackthis, and the other virus scanners that were suggested.

    Like the other person mentioned, I get this error:

    "Can not find script file "C:\Documents and Settings\Owner\Local Settings\Temp\.tt2.tmp.vbs"

    When I FIRST start up my computer, it doesn't happen again. And then my desktop was changed to a blue screen with the words saying

    "Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer"

    At the same time all this was happening, Antivirus XP 2008 or something like that was downloaded onto my computer and was underneath a weird tag that started out like this: phcp60j0ev, it was a .exe and the numbers at the end were 71. I don't recall if the numbers in the middle were 60, I got that off bushyaus's thread. It was similar to that, but not exact.

    And then of course, I can't open some of my programs. Which include games, and some antivirus programs I have. I don't know why this is doing this, everything was fine until I restarted my computer and I started having this problem.

    anyways, any help is appreciated... I just don't know what to do since I can't open up those programs that people were suggesting to download.
     
    Last edited: Aug 2, 2008
  2. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    Hi Athey,

    If unable to run anything in the Normal Mode, Let’s try to sneak up on it like this:

    Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in Safe Mode with Networking.


    Please download Malwarebytes' Anti-Malware to your desktop.
    • Double-click mbam-setup.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select Perform full scan, then click Scan.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Be sure that everything is checked, and click Remove Selected.
    • When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found here: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
    • Please post contents of that file in your next reply.

    Download ComboFix from Here to your Desktop.
    Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
    • Double click combofix.exe and follow the prompts.
    • When finished, it shall produce a log for you. Post the Combofix log and a HiJackthis log in your next reply

    Note: Do not mouseclick combofix's window while its running. That may cause it to stall.

    Extra-Note: Please, DO NOT use ComboFix on your own. It is a very powerful tool designed to deal with sophisticated infections and if something goes wrong or you use it incorrectly, you could possibly lose the use of your computer. It is ONLY meant to be used under the direct supervision of a malware removal specialist.



    Reboot to Normal Mode

    You should be able to run a HijackThis and get a log now:

    Please post back with the HJT log, combofix log and malwarebytes log and we can go from there…

    2OG
     

Share This Page