Author Topic: Wscript.exe virus  (Read 17925 times)

0 Members and 1 Guest are viewing this topic.

kartenzi

  • Guest
Re: Wscript.exe virus
« Reply #15 on: September 07, 2013, 06:23:33 PM »
Win xp: OTM & DDS log attached.

argus

  • Guest
Re: Wscript.exe virus
« Reply #16 on: September 07, 2013, 06:35:53 PM »
Again for XP

Code: [Select]
:files
c:\documents and settings\enzi\dati applicazioni\c59
c:\documents and settings\enzi\dati applicazioni\c59\*.js
C:\c4a
c:\programmi\da9

:reg
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"d38"=-

:commands
[Reboot]

kartenzi

  • Guest
Re: Wscript.exe virus
« Reply #17 on: September 07, 2013, 06:37:23 PM »
DDS logs win 7

argus

  • Guest
Re: Wscript.exe virus
« Reply #18 on: September 07, 2013, 06:52:55 PM »
Win7 is OK.

kartenzi

  • Guest
Re: Wscript.exe virus
« Reply #19 on: September 07, 2013, 07:02:57 PM »
Win XP logs attached

argus

  • Guest
Re: Wscript.exe virus
« Reply #20 on: September 07, 2013, 07:09:21 PM »
It is good now  :)

Only for XP.
 
Run AdwCleaner and then:


Please download zoek.zip () from here or here and save it to your Desktop.
Unpack the archive...
  • Close any open browsers
  • Temporarily disable your AntiVirus program. (If necessary)
    If you are unsure how to do this please read this or this Instruction.

  • Double click on zoek.exe to run the tool .
    Please wait while the tool does not start...

  • Copy the text present inside the code box below and paste it into the large window in the zoek tool:
Code: [Select]
filesrcm;
startupall;
skipfix-iedefaults;
firefoxlook;
chromelook;
  • Click on button.
    Please wait until a logreport will open (this can be after reboot)

  • Save notepad to your Desktop and attach here zoek-results.log
    Note: It will also create a log in the C:\ directory named "zoek-results.log"

kartenzi

  • Guest
Re: Wscript.exe virus
« Reply #21 on: September 07, 2013, 07:25:21 PM »
with adwcleaner do I have just to scan or clean too?

argus

  • Guest
Re: Wscript.exe virus
« Reply #22 on: September 07, 2013, 07:27:19 PM »
Quote
with adwcleaner do I have just to scan or clean too?

Scan and Clean.

kartenzi

  • Guest
Re: Wscript.exe virus
« Reply #23 on: September 07, 2013, 07:55:42 PM »
zoek log attached

argus

  • Guest
Re: Wscript.exe virus
« Reply #24 on: September 07, 2013, 08:02:06 PM »
OK, connect again flash drive on any PC.
Attach here last csan log.

kartenzi

  • Guest
Re: Wscript.exe virus
« Reply #25 on: September 07, 2013, 08:06:57 PM »
Thanks Argus, but which "last scan log"? The pendrive one? With which program?

argus

  • Guest
Re: Wscript.exe virus
« Reply #26 on: September 07, 2013, 08:18:57 PM »
MCShield was installed and will automatically scan pendrive.
Plug in all pendrives.

You'll find the log at this location:

Start -> All Programs -> MCShield -> Logs - > All scan


kartenzi

  • Guest
Re: Wscript.exe virus
« Reply #27 on: September 07, 2013, 08:23:45 PM »
f: mc shield scan attached.
last thing: on xp, control panel link disappeared and if I try to click on "Programs settings" it says "Operation canceled. On the computer some restrictions are activated. Contact the system administrator"...why?

argus

  • Guest
Re: Wscript.exe virus
« Reply #28 on: September 07, 2013, 08:27:27 PM »
Restart your computer.

kartenzi

  • Guest
Re: Wscript.exe virus
« Reply #29 on: September 07, 2013, 08:42:54 PM »
Pc restarted but control panel/restriction problems remain...