Jump to content

VBS Error popup every 5 Minutes!


PCGamer
 Share

Recommended Posts

I would need logs from FRST.

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to your desktop.
For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to the disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

  • Upvote 1
Link to comment
Share on other sites

Copy the below code to Notepad; Save As fixlist.txt to your Desktop.

HKLM-x32\...\Winlogon: [Userinit] userinit.exe,",
S2 ZAMSvc; "C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe" /service [X]
2017-02-13 23:36 - 2017-02-13 23:38 - 00000000 __SHD C:\o69cN7lvKfo69cN7lvKf
2017-02-13 23:36 - 2017-02-13 23:36 - 00003556 _____ C:\Windows\System32\Tasks\o69cN7lvKf
2017-02-13 23:36 - 2017-02-13 23:36 - 00000000 ____D C:\Users\user\o69cN7lvKf
2017-02-08 19:25 - 2017-02-09 14:52 - 00000000 ____D C:\Users\user\AppData\Local\FSDART
2017-02-08 19:25 - 2017-02-08 19:28 - 00000000 ____D C:\ProgramData\F-Secure
2017-02-08 19:25 - 2017-02-08 19:25 - 00000000 ____D C:\Users\user\AppData\Local\F-Secure
2017-02-08 19:24 - 2017-02-08 19:25 - 00524248 _____ (F-Secure Corporation) C:\Users\user\Downloads\F-SecureOnlineScanner.exe
2017-01-05 14:58 - 2017-01-05 14:58 - 0000000 _____ () C:\Users\user\AppData\Roaming\gdfw.log
2017-01-05 14:58 - 2017-01-05 14:58 - 0000779 _____ () C:\Users\user\AppData\Roaming\gdscan.log
2017-01-04 15:21 - 2017-01-04 15:21 - 0047026 _____ () C:\ProgramData\agent.1483536097.bdinstall.bin
2017-01-04 16:10 - 2017-01-04 16:10 - 0029016 _____ () C:\ProgramData\agent.1483539047.bdinstall.bin
2017-01-04 16:10 - 2017-01-04 16:10 - 0219387 _____ () C:\ProgramData\cl.1483538758.bdinstall.bin
2017-01-04 15:33 - 2017-01-04 15:33 - 0055871 _____ () C:\ProgramData\dm.1483536780.bdinstall.bin
2017-01-04 16:06 - 2017-01-04 16:06 - 0035314 _____ () C:\ProgramData\dm.1483538773.bdinstall.bin
2017-02-13 23:37 - 2017-02-12 16:26 - 11353495 _____ () C:\Users\user\AppData\Local\Temp\0b03.dll
2017-02-09 18:14 - 2017-02-09 18:14 - 44048864 _____ (Skype Technologies S.A.) C:\Users\user\AppData\Local\Temp\SkypeSetup.exe
Task: {696B7250-0AE8-4869-B8AC-A3E80328B01E} - System32\Tasks\fs1news => Chrome.exe hxxp://fs1news.ru/afishasm
Task: {855F7071-AD57-4A92-A92C-15ABC6943B0A} - System32\Tasks\o69cN7lvKf => C:\o69cN7lvKfo69cN7lvKf\o69cN7lvKf.vbs 

Close Notepad.

NOTE: It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST64 and press the Fix button just once and wait.

If the tool needed a restart please make sure you let the system restart normally and let the tool complete its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Attach it to your reply.

Note: If the tool warns you about an outdated version please download and run the updated version.

  • Upvote 1
Link to comment
Share on other sites

Thread Closed

Reason: Resolved

The procedures contained in this thread are for this user and this user only.  Attempting to use the instructions in this thread on your system could result in damaging the Operating System beyond repair.  Do Not use any of the tools mentioned in this thread without the supervision of a Malware Removal Specialist.

All posters requesting Malware Removal assistance are required to follow all procedures in the thread titled START HERE if you don't we are just going to send you back to this thread.
 

  • Upvote 1
Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...