Jump to content

Tony_Garratt

Members
  • Posts

    12
  • Joined

  • Last visited

Reputation

0 Neutral
  1. It looks great now - no issues as far as I can see. Thank you so much for your help. Have a beer or 2 on us :-) Tony
  2. Looking good at the moment. Im going to keep an eye on it for several hours today to confirm. Tony
  3. Thank you so much. Here are 2 versions of fixlog.txt from running FRST on Matthew's account. Unfortunately, when I first ran FRST the anti-virus (Trend Micro) we use stopped FRST64.exe running and removed the exe (see fixlist_firsttry.txt). So I then turned off Trend and ran FRST a second time (see fixlist.txt). Thanks again, Tony Fixlog.txt Fixlog_firsttry.txt
  4. Hi! Logged back into the Matthew account and ran farbar and log files attached. I dont see any evidence of the virus at the moment in the Task Manager. regards, Tony Addition.txt FRST.txt
  5. Followed instructions and files from anti-rootkit are attached. Note: the virus was first showing up on account Matthew (that did not have Administrator rights) so I logged into the other account (called Admin) on the laptop that did have Administrator rights and ran the anti-rootkit on that account, since instructions above state that requirement :-() Thanks! Tony mbar-log-2015-01-02 (17-12-02).txt system-log.txt
  6. Not sure exactly which virus/trojan/malware it is, but not been able to remove it by use or rkill/Malwarebytes/mbar, so here goes from scratch. Symptom is an exe named xguqqqx.exe running multiple times (presumably a random name) and Malwarebytes blocking suspicious web sites Farbar files are attached. Any help is much appreciated and am very happy to make a donation. regards, Tony Addition.txt FRST.txt
  7. Assuming those log files dont show up anything, then I think you can close this case. Thank you for your time! regards, Tony
  8. Hi! No more warnings from Malwarebytes about fff5ee :-) Here are the attached logfiles... Addition.txt FRST.txt
  9. Hi! Thank you for your help - it is much appreciated. MBAR found 2 registry entries, which I cleaned and rebooted. Log files are attached. regards, Tony system-log.txt mbar-log-2014-11-09 (05-15-32).txt
  10. Ive got the premium version of Malwarebytes - had it for some time - and I am getting the Malwarebytes warning about fff5ee.com IP 95.215.57 being blocked - similar to other posts on the same topic. Attached are the 2 files from Farbar. Any help will be most appreciated as well as info on how to make a donation for any help received. Regards, Tony Addition.txt FRST.txt
  11. Ive got the premium version of Malwarebytes - had it for some time - and I am getting the Malwarebytes warning about fff5ee.com IP 95.215.57 being blocked - similar to other posts on the same topic. There doesnt appear to be a standard or "one size fits all" way of getting rid of this, unless I am mistaken. I work in software and can probably handle remove of this virus on my own, provided there are some general instructions. Is this trojan so new that there is not yet a standard set of steps with rkill etc etc that are guaranteed to remove it? Any help is most appreciated. regards, Tony
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.