Avast WEBforum
Business Products => Avast Business => Topic started by: REDACTED on October 25, 2016, 12:08:50 PM
-
Hello
I am infected with a virus known enough, who do your shortcut folder
The problem is not on a USB key, but the DATA partition of my windows. (Windows server 2012).
So I use several software such as USB fix, malwarebytes, RogueKiller ...
Here the infected file:
This file is in the registry, it regenerates it permanently.
more when I right click on an infected shortened, the target is C: \ Windows \ system32 \ cmd.exe / c start wscript /e:VBScript.Encode Manuel.doc
so I remove MANUEL.DOC, but it constantly regenerates.
I use Avast Endpoint Protection Suite detects nothing;
Can you help me because I'm blocked.
-
Looks like the Forbix worm to me.
Spreads through removable media and network drives.
Real easy to stop and remove.
Call your admin and have him remove it.
-
You may try
Anti-VBS/VBE > http://www.mcshield.net/download/tools/Anti-VBSVBE/
For USB protection MCShield > http://www.mcshield.net/