hi my avast sometimes pops up and tells me it has blocked wscript.exe. i’ve looked at some other threads on the forums and looked at the replies from essexboy. but the threads i’ve looked at they say it comes from a usb drive? but i’m not sure why mine’s begun to block it. it started yesterday and it’s made my pc a little slower.
Hi have you recently used a USB ? If so could you insert it after you have installed MCShield
Download MCShield to your desktop and install
It will initially run a scan and show the result as a toaster by the system clock
Then in the control centre select scanner and tick unhide items on flash drives
https://dl.dropbox.com/u/73555776/mcshield%20unhide.JPG
Plug in the drive and McShield will start a scan
Then get the log which will be here :
Start > all programs > MCShield > logs > all scans
And post that
THEN
Download OTL to your Desktop
Secondary link
[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
https://dl.dropboxusercontent.com/u/73555776/OTL_Main_Tutorial.gif
[*]Select All Users
[]Select LOP and Purity
[]Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir “%systemdrive%*” /S /A:L /C
CREATERESTOREPOINT
[*]Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Attach both logs
i’ve used an external hdd so is there any chance that my files on there will be deleted?
Only if they are the cause of the infection, they will be sent to quarantine 
also i’ve used 2 different external hdds and 1 normal fat32 usb. should i post logs from all of them?
Only if MCShield detects a problem
here’s the mcshield log file. and with otl should all my usbs be inserted?
No, no need for them to be in with OTL
here’s from otl
Is this still happening as I can see no sign of that malware on your system ?
Hi sorry to intrude here but i am having the same problems. i have installed an ran both OTL and MC2 shield , the logs are attached
My usb stick contains a folder that auto regerenates itself even after mc2shield fixed it or after a full format.
Thanks in advance for your much needed help.
yes its still happening.
@LoveMyslf does this happen when you run a specific programme ? Could you attach a screenshot of the alert popup
@abyssal I will start another thread for you http://forum.avast.com/index.php?topic=138905.new#new
yes i will when i have the option. and it’s not when i open a specific program, its after maybe 10 mins ive turned on my pc.
Do you start anything at around about that time ? I.e. browser
maybe chrome or itunes
Could you run this and then try opening chrome to see if it re-appears
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot
Run OTL
[*]Under the Custom Scans/Fixes box at the bottom, paste in the following
https://dl.dropbox.com/u/73555776/OTL_Fix.GIF
:Commands
[CREATERESTOREPOINT]
:Files
C:\Users\Elias\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
:Commands
[resethosts]
[emptytemp]
[Reboot]
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
here’s the log file. and just found out that the warning pops up before i start chrome it’s every time i boot my pc and then after 3 mins the warning pops up. forgot to take a screenshot… anywhere i can see the warning details in avast or should i wait until it pops up again?
Can you right click the Avast blob and select show last popup and then screenshot that please
… that’s just an update notification… i’ll reboot