Author Topic: wscript.exe virus  (Read 12428 times)

0 Members and 1 Guest are viewing this topic.

endlasuresh

  • Guest
Re: wscript.exe virus
« Reply #15 on: October 17, 2013, 07:48:00 PM »
That was laptop and running good only, but when i refresh the desktop icons were flashing.
My Pc gone very slow and tomorow i will post those log files of my PC.

endlasuresh

  • Guest
Re: wscript.exe virus
« Reply #16 on: October 23, 2013, 01:44:26 PM »
here are some log files of my PC.
DNS values are changing when Killing with Roguekiller.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: wscript.exe virus
« Reply #17 on: October 23, 2013, 03:23:50 PM »
So this is the desktop ?  And the other was the laptop. 

I will need an OTL log for the desktop

endlasuresh

  • Guest
Re: wscript.exe virus
« Reply #18 on: October 24, 2013, 11:09:16 AM »
here is my desktop OTL files

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: wscript.exe virus
« Reply #19 on: October 24, 2013, 03:10:53 PM »
No sign of it there either.. Although you have used an infected USB at some stage

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:Commands
[CREATERESTOREPOINT]

:OTL
O33 - MountPoints2\{819bb0c2-2e93-11e3-a719-00e04c681114}\Shell\AutoRun\command - "" = G:\RECYCLER\autorun.exe
O33 - MountPoints2\{819bb0c2-2e93-11e3-a719-00e04c681114}\Shell\Explore\command - "" = G:\RECYCLER\autorun.exe

:Commands
[resethosts]
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

endlasuresh

  • Guest
Re: wscript.exe virus
« Reply #20 on: October 27, 2013, 06:56:37 PM »
The script is not running, but  here is my OTL scan file of present.


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: wscript.exe virus
« Reply #21 on: October 27, 2013, 07:00:57 PM »
How is the computer behaving now ? 

You may need to temporarily uninstall MBAM to get the OTL fix to run

endlasuresh

  • Guest
Re: wscript.exe virus
« Reply #22 on: October 30, 2013, 06:50:34 PM »
The PC is too much slow and their is no improvement at all, even the typing speed goes slow. I will uninstall MBAM and run the script will see.

Regards
Suresh