Author Topic: Shortcut virus - location: cmd (C:\Windows\System32)!! Please Help Again  (Read 4935 times)

0 Members and 1 Guest are viewing this topic.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Shortcut virus - location: cmd (C:\Windows\System32)!! Please Help Again
« Reply #15 on: February 11, 2014, 11:57:48 AM »
Good, PC is clean, let's disinfect your USB


Please download MCShield from one of the following links:

MCShield -Official download link
Softpedija -mirror download link

  • Double click on MCShield-Setup to install the application.
    Next => I Agree => Next => Install ... per installation click on Run! button.
  • Wait a few seconds to MCShield finish initial HDD scan...
  • Connect all your USB storage devices to the computer one at a time. Scanning will be done automatically.
  • When all scanning is done, you need to post a logreport that MCShield has created.
Under Logs tab (in Control Center) for AllScans.txt log section click on Save button. AllScanst.txt report shall be located on your Desktop.

=> Post here AllScanst.txt


Explanation: USB storage devices are all the USB devices that get their own partition letter at connecting to the PC,
e.g. flash drives (thumb/pen drives, USB sticks), external HDDs, MP3/MP4 players, digital cameras,
memory cards (SD cards, Sony Memory Stick, MultiMedia Cards etc.), some mobile phones, some GPS navigation devices etc.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

Ambobaba

  • Guest
Re: Shortcut virus - location: cmd (C:\Windows\System32)!! Please Help Again
« Reply #16 on: February 11, 2014, 12:22:37 PM »
Thanks a lot  :D

Attached is the file..

Thank you for putting your time and effort into this. May you be rewarded with all goodness in return.

Ambo

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Shortcut virus - location: cmd (C:\Windows\System32)!! Please Help Again
« Reply #17 on: February 11, 2014, 12:48:09 PM »
Everything should be good now, do you agree?
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

Ambobaba

  • Guest
Re: Shortcut virus - location: cmd (C:\Windows\System32)!! Please Help Again
« Reply #18 on: February 11, 2014, 08:09:48 PM »
Very much so  ;)

You are a star ..

Ambo

Ambobaba

  • Guest
Re: Shortcut virus - location: cmd (C:\Windows\System32)!! Please Help Again
« Reply #19 on: February 11, 2014, 08:22:03 PM »
Got it chief Pondus..

all tools used are removed now.

Thanx

Ambo


Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Shortcut virus - location: cmd (C:\Windows\System32)!! Please Help Again
« Reply #20 on: February 11, 2014, 08:32:48 PM »
Ok :)



The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;
Remove disinfection tools
Create registry backup
Purge System Restore

Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

Ambobaba

  • Guest
Re: Shortcut virus - location: cmd (C:\Windows\System32)!! Please Help Again
« Reply #21 on: February 11, 2014, 10:06:00 PM »
Ok.. I've done it. I thought I had to do it manually!

The log show all the tools and related folders deleted and a restore point created.

Thank you once more.

Ambo :D