« previous next »
Pages: 1 [2] 3   Go Down

Author Topic: Infected PC  (Read 6901 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Re: Infected PC
« Reply #15 on: October 24, 2016, 09:45:52 AM »
Which batch file?
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Infected PC
« Reply #16 on: October 24, 2016, 09:47:39 AM »
The one on the usb stick.
Logged

Offline dbrisendine

  • Malware Fighter
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1258
Re: Infected PC
« Reply #17 on: October 24, 2016, 09:54:43 AM »
Usually we ask for seperate threads for each system but since this seems to be a related infection please post the laptop files here but add laptop to the log names (you may have to do a Save as ... in Notepad).

And the contents of that batch file on the USB drive would be very informative.
Logged
Win7 x32 Ult. SP1, Brain 2.0 / Win10 x64, Brain2.5
My help is always free but if you would like to help encourage me or show your thanks -----> DONATE

REDACTED

  • Guest
Re: Infected PC
« Reply #18 on: October 24, 2016, 10:17:57 AM »
I can't seem to find any batch files(.bat, .cmd, .btm) in it or I may have no idea what to look for.
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Infected PC
« Reply #19 on: October 24, 2016, 10:38:18 AM »
It does show in your images.
Could be you need to enable "show hidden files and folders"
Logged

REDACTED

  • Guest
Re: Infected PC
« Reply #20 on: October 24, 2016, 10:50:44 AM »
Ah, I see.
It no longer shows on my pc but I inserted a drive on my laptop and it's back.



Quote
cd Drive
start wscript "776\pdsxhav.js"
exit

that's the content.

Also, I can't seem to install malwarebytes on my laptop.


Edit:

I can't install anything. Even Farbar won't run. It opens for a second then closes again. I made sure to run as admin. (and there are no other users in this laptop)



« Last Edit: October 24, 2016, 11:26:55 AM by Leilrm »
Logged

REDACTED

  • Guest
Re: Infected PC
« Reply #21 on: October 24, 2016, 11:44:55 AM »
Here's another one from the third usb stick.

Quote
cd Drive
start wscript "838\mhbne.js"
exit



both folders contain a js file that looks gibberish to me.
Here's one of them.



Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Infected PC
« Reply #22 on: October 24, 2016, 04:09:55 PM »
Logged

REDACTED

  • Guest
Re: Infected PC
« Reply #23 on: October 25, 2016, 05:09:47 AM »
Mcshield doesn't detect those as malicious when I inserted the stick back to pc to clean it.
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Infected PC
« Reply #24 on: October 25, 2016, 09:08:28 AM »
Disable the automatic showing/opening of removable media.
Attach the usb stick and format it right away.
Logged

REDACTED

  • Guest
Re: Infected PC
« Reply #25 on: October 25, 2016, 10:34:38 AM »
How do I fix my laptop then?
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Infected PC
« Reply #26 on: October 25, 2016, 10:38:15 AM »
Same way as you did with the pc.
Provide the log files and let one of the listed malware removers help you.
Logged

REDACTED

  • Guest
Re: Infected PC
« Reply #27 on: October 25, 2016, 11:20:47 AM »
I can't install anything in it. I've provided screenshots of the dialogue boxes that pops up whenever I try to run the installers.
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Infected PC
« Reply #28 on: October 25, 2016, 11:43:29 AM »
Use a live cd/dvd/usb stick and run the tools from there, something like
https://forum.avast.com/index.php?topic=53253.0 > "If you cannot  Boot the computer"
Logged

REDACTED

  • Guest
Re: Infected PC
« Reply #29 on: October 29, 2016, 07:25:14 AM »
I also cannot run OTLPENet.exe . It opens abruptly then closes.
Logged
Pages: 1 [2] 3   Go Up
« previous next »