Help with malware located in wscript.exe

Viruses and worms
1

Please i need your help with this malware, i have already done a scan with OTL, im attaching the log

Ps: This malware is relationated with constantly pop ups from my antivirus, shows me something like this http://etpsoprc.ru/a/, http://copertps.com/a/ and https://specrtop.org/a/.

2

removers are notified, check back tomorrow, i think they all are in bed now…

3

Re-run OTL.exe.

[*]Copy and paste the following text written inside of the quote box into the Custom Scans/Fixes box.

:OTL
O4 - HKCU..\Run: [aa9e] C:\Users\Odae\AppData\Roaming\bc8\aa9e.js ()
O4 - HKCU..\Run: [Pokki] C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\LaunchDeskband.dll",RunLaunchDeskband File not found
O33 - MountPoints2\{073f7ec7-dff3-11e2-ad6c-1c6f65862287}\Shell - "" = AutoRun
O33 - MountPoints2\{073f7ec7-dff3-11e2-ad6c-1c6f65862287}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a

:files
C:\bd1
C:\Users\Odae\AppData\Roaming\bc8
ipconfig /flushdns /c

:commands
[CREATERESTOREPOINT]
[emptytemp]

[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.

.

Check USB storage devices / removable drives

Download MCShield from one of the following links:

MyCity - Official download link
Softpedija - Mirror download link

[*] Double click MCShield-Setup to install the application.
[*] Wait a few seconds to MCShield finish initial scan.
Recommendation to under General and Scanner tab you click on Defaults button to choose recommended options.
[*] Connect your USB storage devices to the computer one at a time. Scanning will be done automatically.

When all scanning is done, you need to attach a logreport that has made MCShield.

Start → All Programs → MCShield → Logs

Attach here → AllScans.txt

Explanation: USB storage devices are all the USB devices that get their own partition letter at connecting to the PC,
e.g. flash drives (thumb/pen drives, USB sticks), external HDDs, MP3/MP4 players, digital cameras,
memory cards (SD cards, Sony Memory Stick, MultiMedia Cards etc.), some mobile phones, some GPS navigation devices etc.

4

Thanx for the help, but im still receiving the annoying messages from avast persisting that i have a malware from this source http://etpsoprc.ru/a/…

5

attach screenshot of avast warning popup so argus can see all info on it

and attach the logs he requested from OTL and MCShield…

6

ok, im attaching other logs…, i still not able to open ccleaner or regedit. I had to rename OTL and hijackthis to make them work…

7

Please see my first post and install Mcshield, you have worms on USB drives

Also you have not done OTL fix.

Please download Farbar Recovery Scan Tool and save it to your desktop.

[color=green]Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Under Optional Scan ensure “List BCD” and “Driver MD5” are ticked.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

I’m doing this voluntarily and divides my own free time to help you for free. At least what I expect in return from you is that you follow my instructions to the letter. If you can’t / don’t want to follow my instructions, I would not want to waste my time any more.