Wscript.exe virus

[kartenzi]

I'm going to lunch. Thank you for your help until now.
BBS

[argus]

Please download DelFix by "Xplode" to your Desktop.

Run the tool and check the following boxes below;



Now click on "Run" button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt


> I don't need DelFix log report.

[kartenzi]

Delfix done but control panel problems remain..

[argus]

You can not open control panel?
Attach screenshot errors.

[kartenzi]

The control panel link in the Start menu disappeared since I connected the infected usb for the first time, and never reappeared.
You can see the error message that appear when I click on "Impostazioni accesso ai programmi" in the screenshot attached.

[argus]

to try something


Please download zoek.zip () from here or here and save it to your Desktop.
Unpack the archive...

• Close any open browsers
• Temporarily disable your AntiVirus program. (If necessary)
  If you are unsure how to do this please read this or this Instruction.
  
  
• Double click on zoek.exe to run the tool .
  Please wait while the tool does not start...
  
  
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:

Code: [Select]

iedefaults;
autoclean;


• Click on button.
  Please wait until a logreport will open (this can be after reboot)
  
  
• Save notepad to your Desktop and attach here zoek-results.log
  Note: It will also create a log in the C:\ directory named "zoek-results.log"
  

[kartenzi]

zoek log attached

[argus]

Do you still have a problem?

[kartenzi]

yes...

[argus]

Please download Windows Repair (all in one) from here:
http://www.tweaking.com/content/page/windows_repair_all_in_one.html

• Install the program then run.
• Go to Step 2 and allow it to run Disk check
  
• Once that is done then go to Step 3 and allow it to run SFC
  
• Go to Step4 and create registry backup and system restore point.
  
  
  
• On the Start Repairs tab => Click the Start
  - Click on the Select all button and then click on Start
  - Don't use the computer while each scan is in progress!!!
  
  
• Restart may be needed to finish the repair procedure.

[kartenzi]

I did everything but when restarting last time, the program crashed (it was continously opening new windows) and I had to shutdown the pc manually.
Now the pc is on but nothing has changed. When I right click on Start Menu--->My Computer---->Proprieties the same restrictions message appears...
WTF!

[kartenzi]

maybe is something related to this http://www.tricksage.com/2013/06/solved-this-operation-has-been.html ?
really don't know, I'm just trying.
thanks anyway.

[argus]

Download the file, double click Yes / OK restart the computer

http://www.speedyshare.com/qtuK2/controlpanelrestrictionrestore.reg

[argus]

If that does not help follow this instruction:



1. Please download ComboFix from here and save it to your Desktop.
If you are unsure how ComboFix works please read this guide carefully.
note: ComboFix must be downloaded to your Desktop.

--------------------------------------------------------------------
2. Temporarily disable your AntiVirus program.
If you are unsure how to do this please read this or this Instruction.



Note: Do not forget to turn on this option after the cleaning.

--------------------------------------------------------------------
3. Run ComboFix. Click on I Agree!

ComboFix will check if there is a newer version of ComboFix available.
Click Yes if prompted to download.
ComboFix will display DISCLAIMER OF WARRANTY ON SOFTWARE.
Click Yes to allow ComboFix to continue.
If Recovery Console is not installed, ComboFix will offer download & installation.
Click Yes to allow ComboFix to install Recovery Console.
Note:Do not mouse-click Combofix's window while it is running.
If you see a message like "Illegal operation attempted on a registry key that has been marked for deletion" just restart computer once more.

--------------------------------------------------------------------
4. When the tool is finished, it will produce a log report for you. (typical location: C:\ComboFix.txt )
 Attach log reports ( ComboFix.txt) back to topic.

[kartenzi]

the first one was enough.
control panel reappeared!
thank you so much, argus!
just for curiosity, was that a virus, a malware or..?