PCGamer Posted February 14, 2017 Report Share Posted February 14, 2017 Hello, I have a VBS Error Popup each couple of minutes and Its so annoying! Cant work on the computer with this I tried to run Full scan with EIS But It detecs nothing. I've attached an Image here please view It! Link to comment Share on other sites More sharing options...
ShadowPuterDude Posted February 14, 2017 Report Share Posted February 14, 2017 I would need logs from FRST. For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to your desktop. For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to your desktop. Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. Double-click to run it. When the tool opens click Yes to the disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. 1 Link to comment Share on other sites More sharing options...
PCGamer Posted February 14, 2017 Author Report Share Posted February 14, 2017 I already scanned today! There Is the logs. Addition.txt FRST.txt Link to comment Share on other sites More sharing options...
ShadowPuterDude Posted February 14, 2017 Report Share Posted February 14, 2017 Copy the below code to Notepad; Save As fixlist.txt to your Desktop. HKLM-x32\...\Winlogon: [Userinit] userinit.exe,", S2 ZAMSvc; "C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe" /service [X] 2017-02-13 23:36 - 2017-02-13 23:38 - 00000000 __SHD C:\o69cN7lvKfo69cN7lvKf 2017-02-13 23:36 - 2017-02-13 23:36 - 00003556 _____ C:\Windows\System32\Tasks\o69cN7lvKf 2017-02-13 23:36 - 2017-02-13 23:36 - 00000000 ____D C:\Users\user\o69cN7lvKf 2017-02-08 19:25 - 2017-02-09 14:52 - 00000000 ____D C:\Users\user\AppData\Local\FSDART 2017-02-08 19:25 - 2017-02-08 19:28 - 00000000 ____D C:\ProgramData\F-Secure 2017-02-08 19:25 - 2017-02-08 19:25 - 00000000 ____D C:\Users\user\AppData\Local\F-Secure 2017-02-08 19:24 - 2017-02-08 19:25 - 00524248 _____ (F-Secure Corporation) C:\Users\user\Downloads\F-SecureOnlineScanner.exe 2017-01-05 14:58 - 2017-01-05 14:58 - 0000000 _____ () C:\Users\user\AppData\Roaming\gdfw.log 2017-01-05 14:58 - 2017-01-05 14:58 - 0000779 _____ () C:\Users\user\AppData\Roaming\gdscan.log 2017-01-04 15:21 - 2017-01-04 15:21 - 0047026 _____ () C:\ProgramData\agent.1483536097.bdinstall.bin 2017-01-04 16:10 - 2017-01-04 16:10 - 0029016 _____ () C:\ProgramData\agent.1483539047.bdinstall.bin 2017-01-04 16:10 - 2017-01-04 16:10 - 0219387 _____ () C:\ProgramData\cl.1483538758.bdinstall.bin 2017-01-04 15:33 - 2017-01-04 15:33 - 0055871 _____ () C:\ProgramData\dm.1483536780.bdinstall.bin 2017-01-04 16:06 - 2017-01-04 16:06 - 0035314 _____ () C:\ProgramData\dm.1483538773.bdinstall.bin 2017-02-13 23:37 - 2017-02-12 16:26 - 11353495 _____ () C:\Users\user\AppData\Local\Temp\0b03.dll 2017-02-09 18:14 - 2017-02-09 18:14 - 44048864 _____ (Skype Technologies S.A.) C:\Users\user\AppData\Local\Temp\SkypeSetup.exe Task: {696B7250-0AE8-4869-B8AC-A3E80328B01E} - System32\Tasks\fs1news => Chrome.exe hxxp://fs1news.ru/afishasm Task: {855F7071-AD57-4A92-A92C-15ABC6943B0A} - System32\Tasks\o69cN7lvKf => C:\o69cN7lvKfo69cN7lvKf\o69cN7lvKf.vbs Close Notepad. NOTE: It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Run FRST64 and press the Fix button just once and wait. If the tool needed a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log on the Desktop (Fixlog.txt). Attach it to your reply. Note: If the tool warns you about an outdated version please download and run the updated version. 1 Link to comment Share on other sites More sharing options...
PCGamer Posted February 15, 2017 Author Report Share Posted February 15, 2017 Did It! Fixlog.txt Link to comment Share on other sites More sharing options...
PCGamer Posted February 15, 2017 Author Report Share Posted February 15, 2017 the poppup of the VBS erorr keep coming back! Link to comment Share on other sites More sharing options...
ShadowPuterDude Posted February 15, 2017 Report Share Posted February 15, 2017 Let's take a fresh look. Run fresh scans with Emsisoft Emergency Kit (EEK) and FRST, attach the new EEK and FRST scans to your reply. Be sure to let me know how things are running. 1 Link to comment Share on other sites More sharing options...
PCGamer Posted February 15, 2017 Author Report Share Posted February 15, 2017 Thank you but someone from Emsisoft David Bigger Head of support Already fixed my All Issues on email! The VBS Error + The website popup! God bless him and you. Now I can play without any annoying popups. Link to comment Share on other sites More sharing options...
ShadowPuterDude Posted February 16, 2017 Report Share Posted February 16, 2017 Thread Closed Reason: Resolved The procedures contained in this thread are for this user and this user only. Attempting to use the instructions in this thread on your system could result in damaging the Operating System beyond repair. Do Not use any of the tools mentioned in this thread without the supervision of a Malware Removal Specialist. All posters requesting Malware Removal assistance are required to follow all procedures in the thread titled START HERE if you don't we are just going to send you back to this thread. 1 Link to comment Share on other sites More sharing options...
Recommended Posts