Русский
Portuguese
产品: (空值)公司: (空值)描述: TVP(KIRIKIRI) 2 core / Scripting Platform for Win32版本: 2.30.2.416MD5: 25bdc3dee24acbe0c32e47SHA1: f57c60ea635b08e9ff4842deef2871932cce9381SHA256: 5e3aca8f044eb20913b8abc953e98f86大小: 3730944目录: D:\????\STUDIO TRIUMPH\妻堕－美里－操作系统: Windows XP发现: July 26, 2012发生: 低
Check your PC with our freeware tool
System Explorer is our freeware awards winning tool which provides easy way how to check all running processes via our database.
This tool will help you keep your system under control.
的过程是“t_otoshi.exe”的安全还是威胁？过程的犯罪嫌疑人对你吗？是您的计算机运行缓慢？你遇到了一些可疑的行为在您的计算机？ We recommends make free computer scan with our
free award-winning tool .
下载的“t_otoshi.exe”
您是否在寻找下载的“t_otoshi.exe”吗？
添加系统“t_otoshi.exe”与上面定义的参数
Select File Rating
Check your PC with our freeware tool
System Explorer is our freeware awards winning tool which provides easy way how to check all running processes via our database.
This tool will help you keep your system under control.
It's real freeware, no ads or bundles, available in installer or portable distribution.
Many satisfied users recommends to try it.wscript.exe shortcut virus
Pages: [1]
Topic: wscript.exe shortcut virus &(Read 2285 times)
0 Members and 1 Guest are viewing this topic.
on: January 05, :44 PM »
So the USBs we've been using have been infected by the shortcut virus. It shows the target as being somewhere in C:\Windows\system32. I also dunno if it's related to the virus, but deleting files is also impossible for the USBs.Could someone possibly help me clean the main PC (which is probably carrying the virus) and the affected USBs? And hopefully without damaging any files.I've attached a malwarebytes log, and another log with a scan of one of the USB drives.
« Reply #1 on: January 05, :29 PM »
Also attach OTL log& &
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.
« Reply #2 on: January 05, :07 PM »
Monitoring...
« Last Edit: January 05, :29 PM by TwinHeadedEagle »
« Reply #3 on: January 05, :52 PM »
Okay, these are the OTL logs.
« Reply #4 on: January 05, :36 PM »
First of all, I need you to unplug any usb you have and do not use it until we clean the system. We'll deal with USB later...Then...Please download
on your DesktopDouble click to run the tool and wait until it finishes.It will make a log named Anti-VBSVBE.txt. Please attach it to your reply.Then...Please download
by Farbar and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.Only one of them will run on your system, that will be the right version. Double-click to run it. When the tool opens click Yes to disclaimer.Under Optional Scan ensure &List BCD& and &Driver MD5& are ticked.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
« Last Edit: January 05, :30 PM by TwinHeadedEagle »
« Reply #5 on: January 05, :45 PM »
Here are the other things you asked for:
« Reply #6 on: January 05, :18 PM »
1. Open notepad and copy/paste the text present inside the code box below.To do this highlight the contents of the box and right click on it. Paste this into the open notepad. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating systemHKU\Mom\...\Run: [qzapepgryf] - C:\Users\Mom\AppData\Roaming\qzapepgryf..vbs [3-08-11] ()C:\Users\Mom\AppData\Roaming\qzapepgryf..vbsStartup: C:\Users\Mom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qzapepgryf..vbs ()C:\Users\Jasper Chua - Admin\AppData\Local\Temp\avguidx.dllC:\Users\Jasper Chua - Admin\AppData\Local\Temp\bitool.dllC:\Users\Jasper Chua - Admin\AppData\Local\Temp\iGearedHelper.dllC:\Users\Jasper Chua - Admin\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exeC:\Users\Jasper Chua - Admin\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exeC:\Users\Jasper Chua - Admin\AppData\Local\Temp\MachineIdCreator.exeC:\Users\Jasper Chua - Admin\AppData\Local\Temp\nvSCPAPI.dllC:\Users\Jasper Chua - Admin\AppData\Local\Temp\nvSCPAPI64.dllC:\Users\Jasper Chua - Admin\AppData\Local\Temp\nvStereoApiI64.dllC:\Users\Jasper Chua - Admin\AppData\Local\Temp\nvStInst.exeC:\Users\Jasper Chua - Admin\AppData\Local\Temp\ose00000.exeC:\Users\Jasper Chua - Admin\AppData\Local\Temp\SkypeSetup.exeC:\Users\Jasper Chua - Admin\AppData\Local\Temp\uttE216.tmp.exeC:\Users\Jasper Chua - Admin\AppData\Local\Temp\vlc-2.0.7-win32.exeC:\Users\Jasper Chua - Admin\AppData\Local\Temp\vlc-2.0.8-win32.exeC:\Users\Jasper Chua - Admin\AppData\Local\Temp\{-69CD-4573-AC48-41D}-24.0..0.1312.52_chrome_updater.exeC:\Users\Jenilee Chua\AppData\Local\Temp\fwupnp.dllC:\Users\Jenilee Chua\AppData\Local\Temp\hotchannel.exeC:\Users\Jenilee Chua\AppData\Local\Temp\logclient.dllC:\Users\Jenilee Chua\AppData\Local\Temp\SkypeSetup.exeC:\Users\Jenilee Chua\AppData\Local\Temp\tipsbubble.dllC:\Users\Jenilee Chua\AppData\Local\Temp\tipsclient.dllC:\Users\Jenilee Chua\AppData\Local\Temp\tipsdone.dllC:\Users\Jenilee Chua\AppData\Local\Temp\tipsflash.dllC:\Users\Mom\AppData\Local\Temp\SkypeSetup.execmd: ipconfig /flushdns2. Save notepad as fixlist.txt to your Desktop.NOTE: =& It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.3. Run FRST/FRST64 and press the Fix button just once and wait.If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.Note: If the tool warned you about the outdated version please download and run the updated version.Then...Re-run FRST and attach fresh report...
« Reply #7 on: January 05, :58 PM »
Here we go, fixlog and another FRST scan report.
« Reply #8 on: January 05, :52 PM »
Ok, PC is now clean, let's clean USB...Connect your USB storage devices to the computer one at a time. Scanning will be done automatically.When all scanning is done, you need to attach a logreport that MCShield has created.Start -& All Programs -& MCShield -& LogsAttach here -& AllScans.txt
« Reply #9 on: January 05, :34 PM »
Log attached!Hopefully these are all the USBs that were affected. (Sorry if I'm not sure. My parents were the ones tinkering with them.)
« Reply #10 on: January 05, :49 PM »
Ok, you're clean now. Any problems?
« Reply #11 on: January 05, :00 PM »
Hmm..The USBs aren't totally clean. There are still some shortcuts for some files (which still link to the cmd32), and are the vir files normally supposed to be present?EDIT: I'm sorry to leave now, but I have to sleep. I'll be back in around 8-10hours. Please post if you have something that can help, and I'll get to work on it once I'm back online. Thanks for taking the trouble so far!
« Last Edit: January 05, :04 PM by Jellywolf »
« Reply #12 on: January 05, :08 PM »
Open MCShield Control center, and under Scanner tab tick Always unhide items on flash drivesTher rescan USB with MCShield. Delete all of the shortcut files you find...We're done here, only to remove used tools. Keep using MCShield on all accounts on your PC, you'll need to start MCShield manually on other accounts and to set language for MCShield to start monitoring.Please download
by &Xplode& to your Desktop.Run the tool and check the f
Remove disinfection tools Create registry backup Purge System RestoreNow click on &Run& button. Wait for the programme completes his work.All the tools we used should be gone.Tool will create and open an log report (DelFix.txt) Note: The report will also be stored on C:\DelFix.txt& I don't need DelFix log report.
« Last Edit: January 05, :00 PM by TwinHeadedEagle »
« Reply #13 on: January 24, :10 PM »
sir TwinHeadedEagle also need ur help plz i have tthe problem and i do the FRST you said there and here are the notepads you asked Jellywolf
« Reply #14 on: January 24, :07 PM »
Download attached fixlist.txt to your Desktop.NOTE: =& It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.Run FRST/FRST64 and press the Fix button just once and wait.If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.Note: If the tool warned you about the outdated version please download and run the updated version.
Pages: [1]Русский
Portuguese
产品: MSI Gaming App公司: Micro-Star International Co., Ltd.描述: MSI Gaming App版本: 1.0.0.16MD5: e7a287d694c02aecfdf4SHA1: 5dbbc69dff163bb53c63d564ae43398SHA256: 28efcc6cb737e60e725c94a60ffc99cf大小: 5901256目录: %PROGRAMFILES%\MSI\MSI GamingApp操作系统: Windows 7发现: May 24, 2014发生: 低 数字签名: MICRO-STAR INTERNATIONAL CO., LTD.
Demographics distribution
Aproximately 50% of users are in the Ukraine. It is also popular in Japan.
Check your PC with our freeware tool
System Explorer is our freeware awards winning tool which provides easy way how to check all running processes via our database.
This tool will help you keep your system under control.
的过程是“msigamingapp.exe”的安全还是威胁？过程的犯罪嫌疑人对你吗？是您的计算机运行缓慢？你遇到了一些可疑的行为在您的计算机？ We recommends make free computer scan with our
free award-winning tool .
下载的“msigamingapp.exe”
您是否在寻找下载的“msigamingapp.exe”吗？
添加系统“msigamingapp.exe”与上面定义的参数
Select File Rating
Check your PC with our freeware tool
System Explorer is our freeware awards winning tool which provides easy way how to check all running processes via our database.
This tool will help you keep your system under control.
It's real freeware, no ads or bundles, available in installer or portable distribution.
Many satisfied users recommends to try it.Русский
Portuguese
产品: XtremeTuner Plus公司: Galaxy Microsystems Ltd描述: XtremeTuner Plus版本: 1.0.2.0MD5: 1ea19bfa2bb212a0c92b2SHA1: 9bea064fa4f8ee70326SHA256: 60ede2fdc68dfd9bfcdb4fa1aeefb4ce977303bad大小: 6855168目录: %PROGFILES64%\XtremeTuner Plus操作系统: Windows 8发现: May 22, 2014发生: 低
Demographics distribution
Aproximately 100% of users are in the Russian Federation.
Check your PC with our freeware tool
System Explorer is our freeware awards winning tool which provides easy way how to check all running processes via our database.
This tool will help you keep your system under control.
的过程是“xtremetuner plus.exe”的安全还是威胁？过程的犯罪嫌疑人对你吗？是您的计算机运行缓慢？你遇到了一些可疑的行为在您的计算机？ We recommends make free computer scan with our
free award-winning tool . 100%的审查文件不同的MD5 在不同的目录标记为的安全。
下载的“xtremetuner plus.exe”
您是否在寻找下载的“xtremetuner plus.exe”吗？
添加系统“xtremetuner plus.exe”与上面定义的参数
Select File Rating
Check your PC with our freeware tool
System Explorer is our freeware awards winning tool which provides easy way how to check all running processes via our database.
This tool will help you keep your system under control.
It's real freeware, no ads or bundles, available in installer or portable distribution.
Many satisfied users recommends to try it.Русский
Portuguese
On this page, you can find detailed information about the file itself,
download information, its demographics distribution, security rating given by users,
antivirus reports from AV applications, user's reviews and
comments for the file and much more, which can help you to decide
if the file can be safe or threat for your computer.
Probably you navigated to this page because some problems with
this file or in need of more information. Solving a file-based
issue can be sometimes very difficult task even for computer
experts. For this and for system monitoring purposes we
have developed a free tool which helps you greatly to keep
your system under control in very easy and user-friendly way.
This tool can also help you to solve problems with high CPU
loads, find security issues or speed-up your computer.
File details of most used file with name "kanbox.exe"
Product: KanboxCompany: 北京袋鼠网络科技有限公司Description: KanboxVersion: 1.5.0.292MD5: 15e475de81dc8eacea32cd6f9b6b1bbaSHA1: f73ad970f47cc81b6dab99bf52e7SHA256: 817ba9c70bb56ce6b277faa051faac8a246fc66623Size: 2432688Directory: %APPDATA%\Kanbox Network\Kanbox\binOperating System: Windows 7Discovered: March 23, 2012Occurence: Low Digital Signature: Beijing LEBO infinity Technology Development CO.,LTD
Check your PC with our freeware tool
System Explorer is our freeware awards winning tool which provides easy way how to check all running processes via our database.
This tool will help you keep your system under control.
Is the Process "kanbox.exe" Safe or Threat ?Process with filename "kanbox.exe" can be Safe or Threat. You must define more file attributes to determine right rating. Our freeware awards winning tool provides easiest way to check your files via our database. Tool contains many useful functions for keep your system under control and uses minimum system resources. .
Download of the "kanbox.exe"
Are you searching for download of the "kanbox.exe"?
Add Review for "kanbox.exe"More information about the file is needed for adding user review. If you know md5 ,size, sha1,sha256 or other attribute of the file which you want to review, then you can use Advanced Search in our . If you don't know details about the file, you can easily check your file with our free tool. .
Check your PC with our freeware tool
System Explorer is our freeware awards winning tool which provides easy way how to check all running processes via our database.
This tool will help you keep your system under control.
It's real freeware, no ads or bundles, available in installer or portable distribution.
Many satisfied users recommends to try it.}