Attach here All scans log (MCShield)
But here I do not see anything
but i can't understand what are you saying about the "pendrive and the logs"When you connect your pendrive, MCShield will scan it ....... when done, [b]copy and paste[/b] the allscan.txt log here
There are some issues with some logs here in the forum, they are displayed as unicode when attached (looks like chinese so not readable. See pic in argus post) since this is a short log, you can copy and paste it
Is it this ?
MCShield AllScans.txt <<<
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/5/2014 12:04:02 PM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/5/2014 12:04:02 PM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
9/5/2014 12:04:02 PM > Drive H: - scan started (no label ~120 MB, FAT flash drive )…
H:\sipkrzpmyl…vbs - Suspicious > Renamed. (MD5: unknown)
H:\AdwCleaner.exe - Suspicious > Renamed. (MD5: 9ded4724d695cfb01960426da011abae)
H:\FRST.exe - Suspicious > Renamed. (MD5: 77ce274a97ed45aa2f582245f2895051)
H:\shck0ju3.exe - Suspicious > Renamed. (MD5: 60bf4ae8cc40b0e3e28613657ed2eed8)
=> Suspicious files : 4/4 renamed.
::::: Scan duration: 6sec ::::::::::::::::::
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/5/2014 12:07:14 PM > Drive H: - scan started (no label ~120 MB, FAT flash drive )…
H:\AdwCleaner.lnk.vir - Malware > Deleted. (; MD5: unknown)
H:\MCShield-Setup.lnk.vir - Malware > Deleted. (; MD5: unknown)
H:\FRST.lnk.vir - Malware > Deleted. (; MD5: unknown)
H:\shck0ju3.lnk.vir - Malware > Deleted. (; MD5: unknown)
H:\fixlist.lnk.vir - Malware > Deleted. (; MD5: unknown)
H:\AdwCleaner.exe - Suspicious > Renamed. (MD5: 9ded4724d695cfb01960426da011abae)
H:\FRST.exe - Suspicious > Renamed. (MD5: 77ce274a97ed45aa2f582245f2895051)
H:\shck0ju3.exe - Suspicious > Renamed. (MD5: 60bf4ae8cc40b0e3e28613657ed2eed8)
H:\sipkrzpmyl…vbs - Suspicious > Renamed. (MD5: unknown)
=> Malicious files : 5/5 deleted.
=> Suspicious files : 4/4 renamed.
::::: Scan duration: 6sec ::::::::::::::::::
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/5/2014 12:22:53 PM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/5/2014 12:22:54 PM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/5/2014 12:54:28 PM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/5/2014 12:54:29 PM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/5/2014 1:20:07 PM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/5/2014 1:20:08 PM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/5/2014 8:23:23 PM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/5/2014 8:23:24 PM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/5/2014 11:14:09 PM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/5/2014 11:14:09 PM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/6/2014 8:36:16 AM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/6/2014 8:36:16 AM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/6/2014 3:42:24 PM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/6/2014 3:42:26 PM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/6/2014 4:11:32 PM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/6/2014 4:11:34 PM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/6/2014 6:13:42 PM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/6/2014 6:13:44 PM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/7/2014 9:34:29 AM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/7/2014 9:34:31 AM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/7/2014 10:04:27 AM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/7/2014 10:04:29 AM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<
9/7/2014 10:28:06 AM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/7/2014 10:28:06 AM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.9.6.1 / Windows 7 <<<
9/7/2014 2:57:52 PM > Drive G: - scan started (no label ~3893 MB, FAT32 flash drive )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.9.6.1 / Windows 7 <<<
9/7/2014 3:45:02 PM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/7/2014 3:45:04 PM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.9.6.1 / Windows 7 <<<
9/7/2014 4:04:59 PM > Drive H: - scan started (no label ~120 MB, FAT flash drive )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.9.6.1 / Windows 7 <<<
9/7/2014 5:47:01 PM > Drive C: - scan started (no label ~155 GB, NTFS HDD )…
=> The drive is clean.
9/7/2014 5:47:04 PM > Drive D: - scan started (no label ~311 GB, NTFS HDD )…
=> The drive is clean.
This laptop is clean.
Do you have another laptop?
Thank you argus, pondus and the other generous guys 8)! I appreciated your help. Can you help me for the next 3 other laptops ? or I will just do what i’ve done in the first place ? If its ok? Then I think I can do it. ;D
Can you help me for the next 3 other laptopsStart with attaching logs for next computer ......
It is ok that I will not attach the log for MBAM cause the screen is too small so I can’t click the export/save log. But it says no malware detected.
For the fixlog.
and MCshield log
MCShield AllScans.txt <<<
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.9.6.1 / Windows 7 <<<
09/08/2014 9:34:17 AM > Drive C: - scan started (no label ~127 GB, NTFS HDD )…
=> The drive is clean.
09/08/2014 9:34:18 AM > Drive D: - scan started (no label ~171 GB, NTFS HDD )…
=> The drive is clean.
There is a point in bob’s post.But i think we should work together to defeat malware and not watch who is using what and then help them.
Step1
Please download Anti-VBSVBEx86.exe on your Desktop
[*]Double click to run the tool and wait until it finishes.
[*]It will make a log named Anti-VBSVBE.txt. Please attach it to your reply.
.
Step2
Please download AdwCleaner by Xplode and save to your Desktop.
Double click on AdwCleaner.exe to run the tool.
[*]Click on the Scan button.
[*]After the scan has finished click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
[*]After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
[*]Post logfile will also be saved in the C:\AdwCleaner folder.
.
Step3
1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
Start
Task: {D80A6CFD-33D8-41C1-8154-74647AFF21B0} - \EPUpdater No Task File <==== ATTENTION
HKU\S-1-5-21-243076342-1454535561-2724800007-1000\...\MountPoints2: {15c632a0-d7b2-11dd-96b1-8c89a50159ac} - E:\AutoRun.exe
HKU\S-1-5-21-243076342-1454535561-2724800007-1000\...\MountPoints2: {6297d694-90f7-11e2-b4d3-8c89a50159ac} - E:\AutoRun.exe
HKU\S-1-5-21-243076342-1454535561-2724800007-1000\...\MountPoints2: {cbe44750-ea1b-11e2-83c5-b803059b2836} - E:\autorun.exe
HKU\S-1-5-21-243076342-1454535561-2724800007-1000\...\MountPoints2: {f2656dca-8d14-11e2-9086-806e6f6e6963} - E:\AutoRun.exe
HKU\S-1-5-21-243076342-1454535561-2724800007-1000\...\MountPoints2: {f2656e0b-8d14-11e2-9086-8c89a50159ac} - E:\AutoRun.exe
Ask Toolbar (HKLM\...\Ask Toolbar_is1) (Version: 4.1.0.5 - Ask.com) <==== ATTENTION
Torch (HKCU\...\Torch) (Version: 25.0.0.3359 - Torch Media Inc.) <==== ATTENTION
Reboot:
End
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.
Here are the logs:
Please download MCShield from one of the following links:
MCShield -Official download link
[*]Double click on MCShield-Setup to install the application.
Next => I Agree => Next => Install … per installation click on Run! button.
[]Wait a few seconds to MCShield finish initial HDD scan…
[]Connect all your USB storage devices to the computer one at a time. Scanning will be done automatically.
[*]When all scanning is done, you need to post a logreport that MCShield has created.
Under Logs tab (in Control Center) for AllScans.txt log section click on Save button. AllScanst.txt report shall be located on your Desktop.
=> Post here AllScanst.txt
Explanation: USB storage devices are all the USB devices that get their own partition letter at connecting to the PC,
e.g. flash drives (thumb/pen drives, USB sticks), external HDDs, MP3/MP4 players, digital cameras,
memory cards (SD cards, Sony Memory Stick, MultiMedia Cards etc.), some mobile phones, some GPS navigation devices etc.
.
Re-run FRST and click scan. Attach here report.
Hey guys, can we postpone in fixing the second laptop and turn into the 3rd laptop ? Because some important matters came up. If its okay to you guys ? But we can continue the second laptop tomorrow or the next other days ?
I will attach the logs MBAM, Adwcleaner, MCShield, Aswmbr, FRST and Combofix
tomorrow okay ? ;D ;D ;D but please tell me what is not necessary.
Second laptop is clean.
Combofix is needless
For the 3rd one 
For MCShield->
MCShield AllScans.txt <<<
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.9.6.1 / Windows 8 <<<
9/9/2014 11:15:05 PM > Drive C: - scan started (no label ~231 GB, NTFS HDD )…
=> The drive is clean.
9/9/2014 11:15:10 PM > Drive D: - scan started (no label ~234 GB, NTFS HDD )…
=> The drive is clean.
9/9/2014 11:15:11 PM > Drive H: - scan started (no label ~120 MB, FAT flash drive )…
=> The drive is clean.
MCShield ::Anti-Malware Tool:: http://www.mcshield.net/
v 3.0.5.28 / DB: 2014.9.6.1 / Windows 8 <<<
9/10/2014 12:17:20 AM > Drive C: - scan started (no label ~231 GB, NTFS HDD )…
=> The drive is clean.
9/10/2014 12:17:22 AM > Drive D: - scan started (no label ~234 GB, NTFS HDD )…
=> The drive is clean.
For the 2nd laptop. Thankyou bro.
Uninstall USB Security.
1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
Start
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - No File
C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - No File
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - No File
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - No File
Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} - No File
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - No File
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - No File
Filter-x32: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} - No File
CHR StartupUrls: Default -> "hxxp://www.sweet-page.com/?type=hp&ts=1409102478&from=cor&uid=ST9500325AS_S2WFRLH3XXXXS2WFRLH3", "", "hxxp://start.pcfaster.com?_bid=fc227c5c700bbd6e3260db1f7c1ef5e0&_t=hpsf", "about:blank"
C:\ProgramData\FileSplitUpLoad.dll
HKU\S-1-5-21-2700310972-707006990-2831406632-1001\...\MountPoints2: {27465cfd-3693-11e4-bedc-685d43c01335} - "E:\AutoRun.exe"
EmptyTemp:
End
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version..
Please download Malwarebytes Anti-Malware ver. 2.0 and install the application.
Double-click on mbam-setup.exe and follow the prompts to install the program. Upon installation, click Finish
Note: A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish…
On the first launch, you’ll get an “Update” notification. Click the ‘Update Now >>’ link or button to complete update.
• Configure the scanner. On the Settings tab, Detection and Protection adjust the following options:
- subtab Detection Options, tick the box ‘Scan for rootkits’.
- subtab Non-Malware Protection, for PUP detections, from ‘Warn user abaut detecion’ select ‘Threat detections as malware’.
• Preform the Scan. Click on the Scan tab, then click on Scan Now >> for Threat Scan.
If an update is available, click the ‘Update Now’ button, then continue to Scan.
Note: only with some infections, you may see this message box ‘Could not load DDA driver’
In this case, click ‘Yes’ to this message, to allow the driver to load after a restart.
Allow the computer to restart. Continue with the rest of these instructions.
When the scan is complete, click Apply Actions. Wait for the prompt to restart the computer to appear, then click on Yes.
• Post the logs. Click on the History tab > Application Logs. Double click on the Scan Log which shows the date and time of just performed scan.
- Click Export button at the bottom, and then select the ‘Text file (*.txt)’
- In the Save File dialog box which appears, click on Desktop.
- In the File name: box type “mbam” (without quotes) for your scan log name and click Save.
- A message box “Your file has been successfully exported” should appear, click Ok and close the windows.
Please attach the exported/saved log named as mbam.txt to your next reply.