Win32:VB-OJQ

[Sass Drake]

Uninstall PSafe AV.

• Open Notepad (click Start button -> type notepad.exe -> press Enter)
• Copy text from code block below and paste it into Notepad

Code: [Select]

HKLM-x32\...\Winlogon: [Shell] C:\Windows\explorer.exe,Explorer.exe [ ] () <=== ATTENTION


• Go to File -> Save As
• Make sure that  UTF-8 is selected as Encoding (left side of Save button)
• Save it as fixlist.txt on Desktop
• Open again FRST and click on button Fix
• Wait until FRST finishes
• fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.

[REDACTED]

Uninstall PSafe AV.

• Open Notepad (click Start button -> type notepad.exe -> press Enter)
• Copy text from code block below and paste it into Notepad

Code: [Select]

HKLM-x32\...\Winlogon: [Shell] C:\Windows\explorer.exe,Explorer.exe [ ] () <=== ATTENTION


• Go to File -> Save As
• Make sure that  UTF-8 is selected as Encoding (left side of Save button)
• Save it as fixlist.txt on Desktop
• Open again FRST and click on button Fix
• Wait until FRST finishes
• fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.

DONE

[Sass Drake]

Status now?

[REDACTED]

Status now?

Still same... I guess miss something...

[Pondus]

Have you changed avast default scan settings?

[REDACTED]

Have you changed avast default scan settings?

Just the report export option... what action have to take? Repair?

[REDACTED]

Have you changed avast default scan settings?

Well, send all threats i found to virus chest and quarantine... mbam scan and fvs from avast, found no more virus just that infected files than already find in the lastest logs i post up... what i do now?

[Sass Drake]

Rename FRST64.exe to unisntall.exe and run it. That should uninstall FRST. Last FRST logs didn't show traces of active infection.

[REDACTED]

Rename FRST64.exe to unisntall.exe and run it. That should uninstall FRST. Last FRST logs didn't show traces of active infection.

Thank you so much for ur patience, it was very helpful.