Jump to content

Help!


Recommended Posts

My friend's thumbdrive has a hidden folder name mirk and in the folder have file name okitab.exe ,that the folder cannot be viewed even if i changed my folder options to view hidden folders. It can only be viewed under the use of winRar. I think all the processes are normal to me and i have used malwarebytes flash scan and full scan on the thumbdrive, which shows no infections, however when i looked up on the web, theres very few information from it except from www.prevx.com which classify that this is a malware. Just go on google and type in the keywords , okitab.exe prevx .

Link to post
Share on other sites

Hi,

Yes, it's malware.

Do this while the USB flash drive is plugged into the computer:

Download OTL to your Desktop

  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • Check the box that says Scan All Users.
  • Under the Custom Scan box paste this in
    netsvcs
    drivers32
    %systemroot%\*. /mp /s
    CREATERESTOREPOINT
    %systemroot%\System32\config\*.sav
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
    C:\*.*
    D:\*.*
    E:\*.*
    F:\*.*
    G:\*.*
    H:\*.*
    I:\*.*
    J:\*.*
    K:\*.*
    C:\*.
    D:\*.
    E:\*.
    F:\*.
    G:\*.
    H:\*.
    I:\*.
    J:\*.
    K:\*.

  • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic

Link to post
Share on other sites

  • 2 weeks later...

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.