Ah, I see.
It no longer shows on my pc but I inserted a drive on my laptop and it’s back.
http://i63.tinypic.com/wk0602.png
cd Drive start wscript "776\pdsxhav.js" exit
that’s the content.
Also, I can’t seem to install malwarebytes on my laptop.
http://i67.tinypic.com/2gwuu86.png
Edit:
I can’t install anything. Even Farbar won’t run. It opens for a second then closes again. I made sure to run as admin. (and there are no other users in this laptop)
Here’s another one from the third usb stick.
cd Drive start wscript "838\mhbne.js" exit
http://i65.tinypic.com/wc01fb.png
both folders contain a js file that looks gibberish to me.
Here’s one of them.
The batch file + JavaScript are the culprit.
https://www.virustotal.com/en/file/cf4e4ff772986a87ccce3162e8e120003a21a33832173ba8c4650f2fe5735bc0/analysis/1477318103/
Mcshield doesn’t detect those as malicious when I inserted the stick back to pc to clean it.
Disable the automatic showing/opening of removable media.
Attach the usb stick and format it right away.
How do I fix my laptop then?
Same way as you did with the pc.
Provide the log files and let one of the listed malware removers help you.
I can’t install anything in it. I’ve provided screenshots of the dialogue boxes that pops up whenever I try to run the installers.
Use a live cd/dvd/usb stick and run the tools from there, something like
https://forum.avast.com/index.php?topic=53253.0 > “If you cannot Boot the computer”
I also cannot run OTLPENet.exe . It opens abruptly then closes.
IF you have access to a clean system and USB stick (drive) then you can do the following:
Download the following three programmes to your desktop :
For 64bit systems
2. Windows 8.1 64bit RC - sent link to you in PM not to be shared your use only
3. Farbar Recovery Scan Tool x64
Insert the USB stick Then run Rufus
https://dl.dropbox.com/u/73555776/RufusISO.JPG
Select the ISO file on the desktop via the ISO icon.
Press Start Burn
Then copy FRST to the same USB
http://dl.dropbox.com/u/73555776/frstwintoboot.JPG
Insert the USB into the sick computer and start the computer. First ensuring that the system is set to boot from USB
Note: If you are not sure how to do that follow the instructions Here
Windows 8 screen shots
When you reboot you will see this.
Select the language on this screen and keyboard on the next
https://dl.dropbox.com/u/73555776/select%20language8.JPG
Select the Trouble shoot option
https://dl.dropbox.com/u/73555776/Select%20option8.JPG
Select Advanced option
https://dl.dropbox.com/u/73555776/advanced8.JPG
Select Command prompt
https://dl.dropbox.com/u/73555776/command%208.JPG
At the command prompt type the following :
https://dl.dropbox.com/u/73555776/notepad.JPG
The notepad opens. Under File menu select Open.
Select “Computer” and find your flash drive letter and close the notepad.
In the command window type e:\frst64.exe and press Enter
Note: Replace letter e with the drive letter of your flash drive.
The tool will start to run.
When the tool opens click Yes to disclaimer.
https://dl.dropboxusercontent.com/u/73555776/frst.JPG
Press Scan button.
It will make a log (FRST.txt) on the flash drive. Please copy and attach / paste it to your reply.
Sorry, it took me a while.
That’s OK; I seem to be able to stay busy elsewhere… Anyway, run this Fixlist, post the Fixlog.txt file and tell me how your system is running now. Thanks.
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[b] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/b]
Download attached fixlist.txt file and save it to the Desktop:
Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
- Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
- Press the Fix button just once and wait.
- If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
- When finished FRST will generate a log on the Desktop, called Fixlog.txt.
Please attach it to your reply.