virus location c:\windows\32

[dlaazmi]

file in my usb device turn to shortcut.... when trying to open original file... folder c:windows\32 opened... please help me...

[Pondus]

Malware experts are notified

[Pondus]

While waiting attach Malwarebytes and OTL logs  http://forum.avast.com/index.php?topic=53253.0

[TwinHeadedEagle]

Do not use your USB until we clean PC...


Download attached fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.


Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

[dlaazmi]

this is the file

[TwinHeadedEagle]

Good, now run FRST again, press Scan and attach fresh report...

[dlaazmi]

this is the report

[TwinHeadedEagle]

Good, now let's take care of USB


> Check USB storage devices / removable drives


Download MCShield from one of the following links:

MyCity -  Official download link
Softpedia - Mirror download link

• Double click MCShield-Setup to install the application.
  
• Wait a few seconds to MCShield finish initial scan.

Recommendation to under General and Scanner tab you click on Defaults button to choose recommended options.

• Connect your USB storage devices to the computer one at a time. Scanning will be done automatically.

When all scanning is done, you need to attach a logreport that MCShield has created.

Start -> All Programs -> MCShield -> Logs

Attach here -> AllScans.txt

Explanation: USB storage devices are all the USB devices that get their own partition letter at connecting to the PC,
e.g. flash drives (thumb/pen drives, USB sticks), external HDDs, MP3/MP4 players, digital cameras,
memory cards (SD cards, Sony Memory Stick, MultiMedia Cards etc.), some mobile phones, some GPS navigation devices etc.

[dlaazmi]

this is the file

[TwinHeadedEagle]

OK, tell me how is the situation now?

[dlaazmi]

tq... i'm free now...

[TwinHeadedEagle]

Okay, let's remove used tools, and we're done

Keep using MCShield, it will protect you in the future.


Please download DelFix by "Xplode" to your Desktop.

Run the tool and check the following boxes below;

• Remove disinfection tools
• Create registry backup
• Purge System Restore

Now click on "Run" button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt


> I don't need DelFix log report.