Recently I’ve been receiving notif from avast telling me that wscript.exe has been infected with VBS:Downloader-ATF [Trj] and is moved to the chest. However, the chest was empty when I checked. I doubt that the virus has been deleted as I’ve gotten this warning for at least 10 times, anyone could help me with this?
Start a topic in V&W and post your logs there: https://forum.avast.com/index.php?action=post;board=4
Hi,
download the autoruns from here https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns and go to tasks page. Look for task which spawns wscript. It may have name starting with Yahoo or Chromium.
Delete that task and you will get rid of this.
Regards,
PDI