PSP mem card killvbs.vbs repeat infection

[Springy]

Thanks in advance for your help,

I am having a lot of trouble with this killvbs.vbs virus things i'm not that great with the whole virus busting thing and I looked at the preliminary things to do and I just got really confused so if someone could help me here.

This killvbs.vbs is on my computer somewhere I think that it's in C:/windows/system32
I keep formating my psp memory stick and when I connect it to my computer the killvbs.vbs just installs or put's a copy of itself onto it.

so this is my problem I hope that someone here can help it would be much appreciated.

thanks heaps,
Springy

 

[Nirkon]

its been posted here:
https://www.techspot.com/vb/topic78828.html

 

[howard_hopkinso]

Hello and welcome to Techspot.

Very Important: Before deciding whether you should clean or reformat your system, go and read this thread HERE and decide what it is you want to do.

If after reading the above, you wish to clean your system, do the following.

Download this TOOL. Extract it and run the Noob_kill.

Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

Post fresh HJT, AVG Antispyware and Combofix logs as attachments into this thread, only after doing the above.

Also, let me know the results of the AVG Antirootkit scan.

Regards Howard :wave: :wave:

This thread is for the use of Springy only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[Springy]

The log files

There wasn't an AVG anti-spyware log because it didn't find anything, The situation is the sam as above and I just don't know what to do, and the AVG antiroot scan found nothing.

Thanks in advance,
Springy

 

[howard_hopkinso]

Download and install DrWebCureit:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
http://spywareinfo.dk/download/drweb-cureit.exe to your desktop.

Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how HERE.

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.

Doubleclick the "drweb-cureit.exe" and click "ok" in the prompt window that will open , asking "start the express scan now".
It will first make a quick scan of your system, let it clean what it find, and when it says "done"
Click on the green screwdriver-
Actions Tab- Adware-Dialers-Riskware-Hacktools, use dropdown menu and select -Delete
Click on the drive(s) you want to scan . A red dot will mark the selected drive(s) . Then hit the green arrow in lower right corner It will now scan your drive(s), say yes to all

After the scan, in the Dr.Web CureIt menu on top, click file and choose save report list
Save the report to your desktop. The report will be called DrWeb.csv
Close Dr.Web Cureit.

Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot.

Attach the DrWeb.csv log.

Hopefully, DrWebCureit will delete your KillVBS.vbs problem.

Regards Howard

This thread is for the use of Springy only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.