cmd startup in Win 8 after McAfee removed 1 virus + 7 malwares

zeamann · 26 Oct 2014

Dear Sirs and Madams,

I was recently given a brand new Acer Aspire E11 to update and install MS Office and other softwares in it but I decided to update McAfee first and run its full scan because every time I plugged in my usb stick, everything in it just turned into shortcuts...sounds familiar heh!

I spent the last Thursday through Friday just to fully update McAfee; (snail internet) successfully run its full scan and removed the 8 detections but after reboot, till now, a cmd startup will always appear with the following error (white X inside a RED circle) message: "Windows cannot find 'C:\Users\Windows\AppData\Roaming\aiasfacoiaksf.vbs'. Make sure you typed the name correctly, and then try again."

I am lost here as I do not know what to do about it or how to stop this from showing up at every boot.

Thanks much in advance and God bless,

z.

NimoTony · 26 Oct 2014

web search indicates this is a 'backdoor trojan'

How to Clean Aiasfacoiaksf.vbs?(Uninstall Guide) | Browser Hijacker.Trojan.Adware.Malware.Removal Guides.

see the section on 'manual removal'

also see:
http://www.quora.com/How-do-I-remove...from-my-system

zeamann · 26 Oct 2014

greetings NimoTony and thanks much for the links. I am somewhat doubtful to download and install YAC after reading much about it. The second link does not help much either as I did not find both wscript.exe and cscript.exe and opening msconfig in Win8 refers me to Taskbar but did not find anything unusual there under startup tab.

thanks anyways though and please help me look further online. I have just completed a search on C drive for aiasfacoiaksf and did not find anything.

thanks again and God bless,

z.

NimoTony · 26 Oct 2014

this link refers to Win7 - but the process is probably similar in Win 8

Error in Windows 7 start up - Microsoft Community

also--read the 'manual removal' instructions in the first link I sent--you need to be in 'safe mode'

good luck

zeamann · 26 Oct 2014

Thanks so much NimoTony for your efforts. I really appreciate it.

Anyways, I did not follow the manual removal tips in all the links (see attached txt file) I visited because they I am somewhat scared, even though I did try 2 of them but did not find the infection listed under Startup tab of Task Manager, although I've already disabled 4 startup items prior installing Malwarebytes last week, leaving 7 enabled.

Now here is what I did (I was scared even to download malware removal tools listed in the links of txt file) to solve this issue:

1. updated Malwarebytes to today's latest update and ran it full scan. (result attached as zip) Recording done by Windows 8's steps recorder.
2. after reboot, I waited for a few minutes but did not see the cmd + error message startup again; so I ran 2nd full scan of Malwarebytes (result attached as zip) which did not found anything.
3. Rebooted and ran registry scanner of Ccleaner (result attached as zip) also after a few minutes of the infection's non-existence. Found some issues and fixed it. Ran it again and found nothing so...
4. Rebooted and have been waiting now for like 10 minutes, and the startup issue is yet to appear, hence I believe it is safe now to say that this thread is solved.

Thanks again for your efforts and God bless,

z.
malwarebytes anti-malware scan results.zip

malwarebytes anti-malware 2nd scan results.zip

ccleaner scan result to remove remnants of infections.zip

sites visited for resolving cmd plus error startup issue.txt

NimoTony · 27 Oct 2014

looks like you got the little bugger