Avast endpoint protection suite and shortcut Virus regenerated

Avast Business
1

Hello

I am infected with a virus known enough, who do your shortcut folder
The problem is not on a USB key, but the DATA partition of my windows. (Windows server 2012).
So I use several software such as USB fix, malwarebytes, RogueKiller …
Here the infected file:
This file is in the registry, it regenerates it permanently.

more when I right click on an infected shortened, the target is C: \ Windows \ system32 \ cmd.exe / c start wscript /e:VBScript.Encode Manuel.doc
so I remove MANUEL.DOC, but it constantly regenerates.

I use Avast Endpoint Protection Suite detects nothing;

Can you help me because I’m blocked.

2

Looks like the Forbix worm to me.
Spreads through removable media and network drives.

Real easy to stop and remove.
Call your admin and have him remove it.

3

You may try

Anti-VBS/VBE > http://www.mcshield.net/download/tools/Anti-VBSVBE/

For USB protection MCShield > http://www.mcshield.net/