Jump to content

DasEeoo

Members
  • Posts

    15
  • Joined

  • Last visited

Reputation

0 Neutral
  1. Here! Also, I'm getting "there was a problem starting C:\Users\Nicholas\AppData\Roaming\BtvStack.dllthe specified module could not be found"again after using your first fix. I can just run the second fix you sent me a while ago to fix that I assume though.FRST.txt Addition.txt
  2. After a scan, everything 'appears' to be okay. Is there some way I can know for sure?
  3. **UPDATE** I don't know if I fixed it yet, but I did something possibly major. Or bad. I don't know. One of the big issues that was recurring (or common denominators, rather) was a file titled 'jiantim.dll' that was running from my local/appdata area. Whatever that means. ANYWAY. Several antivirus programs marked that as a ransomware, which would explain what I've been getting (although, it looked like something different. I don't know what exactly, but the name that has been recurring, the CryptoWall 3 thing didn't seem to be the one according to one of my antivirus programs. It was running in two different but same-titled system processes under taskmanager as 'Rundll32.exe', which immediately set off my computationally-retarded-DONT-TOUCH-THIS red flag, because I didn't want to possibly endanger my system personally. It wouldn't let me delete the jiantim dll on account of it running in an 'important system process' (rundll32.dll or something). The dll was running from a random appdata folder, and as such couldn't be deregistered using /u in CMD or via "regsvr32 /u C:\Users\Nicholas\AppData\Local\jiantim.dll" I would get an error, as it was in a separate place than the norm from what I can understand. Also, I couldn't remove it with the Antivirus programs I was using, because it would lock up upon detection. sneaky sneaky So I went into taskmgr, "End Process"ed both accounts of the rundll32s, despite the warnings (I used this website as a guide: http://www.howtogeek.com/howto/windows-vista/what-is-rundll32exe-and-why-is-it-running/) Then I was finally able to delete jiantim.dll, and there it sits, in my recycling bin, waiting to be emptied. HOWEVER I am uncertain if my computer is fixed. I am going to restart it, run some antivirus stuff in the morning, and then come back here, so don't mark it as resolved. I need hella help still, as I may have just done something completely stupid and I have no idea because I don't know anything about computers. I basically went with the mindset "JIANTIM.DLL MUST DIE" and came out, but who knows if that's the end of my problems.
  4. Hello, I re-used the fixlist, and it got rid of the Internet Explorer thing again. However, I keep getting all these "HELP_DECRYPT" with a bunch of what I assume to be nonsense about codes and something about cloud storage and corrupted files that I can re-download at some website. Anyway, they appear to be all over the place, (I've deleted dozens of instances of them) and they open on startup as well as the website, which I immediately close out of. Lastly, they first seemed to appear in areas with your fixlists and fixlogs (I saved the copies for future use, and to show a friend of mine because he's a computer science major and was interested), and I think they're responsible for sabotaging the fixlists/fixlogs. They all appear to be damaged or in some foreign language now, and it's not my doing. I've included in my post both the tampered with fixlist.txt and one of the offending text files. I don't know if the .txts themselves are harmful on their own, so I'd encourage you to be safe, but you know about this stuff better. I can also make a post of the HELP one so you don't have to download it if you'd prefer. I can also send the other strange files if you so request, but I wouldn't want to endanger your computer. The FRST, Addition, Fixlog, Fixlist, and AdwCleaner.txts all appear to be similar weird now, in various ways, from being nonsensical text and symbols, to asian language characters. I'm almost thinking it would be safer to just completely factory reset my computer if possible, because I lack any sort of restore points. But I also don't know if it's safe. Could this virus, if I restored with it on it, completely ruin this computer? I don't have any kind of discs for operating systems or anything, the computer came with WIndows 8 already on it. I could stand to lose all my things on here, if anything was of dire importance, I'd move it to another computer if only temporarily. If I can't resolve this in a permanent fashion tomorrow, I'd probably just go the nuclear route, if that's even a safe option. (also, the fixlist seemed to at least for now halt the Internet Explorer thing when it cropped up again) Looking forward to your help/input! Thanks! ~Nick fixlist.txt HELP_DECRYPT.TXT
  5. Okie, done there! Thanks for all this help so far by the way. So far my computer isn't doing anything weird, and the CPU usage has been fluctuating between 2% and 40~%, which is about normal. Back before you were helping it was humming and running at a constant 99%. Fixlog.txt
  6. It also didn't generate an Addition file this time. Idk why. Good sign? FRST.txt
  7. New report. Also, it appears on startup, after the first reboot (I forgot to mention) I get this: There was a problem startingC:\Users\Nicholas\AppData\Roaming\BtvStack.dllthe specified module could not be foundIt looks like it's the same folder that all this virusy stuff is being deleted from, so I guess I'm not too concerned about it, but you're the expert.AdwCleanerS0.txt
  8. Also, my computer is significantly faster already! I'll still follow through though if there's more.
  9. I did the first one, here's the fixlog. Should I do both? (the com did reboot by the way. There appears to be no evidence of IE acting up anymore) I'll get started on the second one, but just tell me if I actually need to do both or if they're separate methods to the same end haha. Fixlog.txt
  10. here you go! My computer is noticeably faster after I blocked the website, but it is still significantly slower than it was like a week ago. FRST.txt Addition.txt
  11. I've blocked myself going to the website on IE, it seems to have helped somewhat, although the IE is still opening up and making attempts to do it. This is one of the websites it keeps visiting if that information helps. I'm currently doing that scan thing, but also trying to occupy myself with other things like that. http://truesearchresults.com/casino.php?params=9kwXw9wr5uUuTXcEXeErwXA8rqoFYQ3%2F%2B116VEWn8Hymyb4E0DlRNQaprSwsRDTH3zLc18i4W1Te4xqVMuFyTS3m%2BfgVEwsgRL6NYM%2F%2BCuKq64a4y4Q5cswU9IEAfQENt0ptexZTtCIOWCx85LJyhop1IcdUb6zuLNzGeI6KfIc%3D It just redirects me to google if I try to go to it, so I have no idea what the hell it's doing. I'll post again when the scan is done. I'm uncertain how long it will take on my currently nauseatingly slow computer.
  12. If I were to hypothetically have had one of those things you mentioned, if I were to uninstall it and delete any related folders, would I be ok? Also, I have a lot of games with overhauls from like ModDB.com Are those technically illegal or anything? I never thought they were, but I also never really thought about it. That being said, I'm trying to open that site, it's obscenely slow. I'm gonna keep trying though.
  13. Hello, let me preface this by saying I am not very tech savvy at all. I can follow instructions, but I'll need to be walked through it. My computer has been running hella slow the past few days, and overheating, etc. so I assumed I had a problem with it, and just ran Malwarebytes' scan in order to remove whatever it is. It quarantined a bunch of items, things continued as they were (still overheating and whatnot, but I figured maybe it was unrelated). Today, I needed to taskmanager out of something, when I noticed Internet Explorer, which I do not use, had like five instances running on taskmanager that I was unaware of. I only use Chrome and Firefox. (Windows 8.1 Toshiba Satellite L75D-A7283, by the way) I clicked end task on them, and like the last two disappeared before I could do anything to them anyway. Like five seconds later, however, like 10 more opened back up, deleted themselves, and has been repeating this process every second my computer has been on for a long time, eating up my Memory, Disk, and CPU all the while. I'm certain it's the culprit of the overheating and obscene slowness. I highlighted a few of them, and they say 'truesearchresults.com' when highlighted, which sounds like some shitty adware, but that can't really be the case, can it? I haven't been advertised to. I'm assuming it's some form of spyware or something, but I have no idea. If I go to process manager Details tab, it displays 13 instances of the offending Internet Explorer thing. This whole thing is extremely disturbing, concerning, and damaging, and I'm trying to get it fixed as fast as possible. I don't know if my stuff is under threat (my passwords, and other things, which I keep mostly on a Sticky Note, for example. I've started getting paranoid because some of my accounts have had suspicious activity, and I've begun creating abbreviated passwords with reminders that are only acronyms or something related, but I'd just like to move on. Please help me as soon as you can!
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.