Jump to content

Ender

Members
  • Posts

    7
  • Joined

  • Last visited

Reputation

0 Neutral
  1. I just ran a new scan with MBAM, nothing found. Also ran a scan with AdwC, It found 7 issues, adding the log file. Just after it was done with the reboot i ran a new scan that produced no issues. (added log file for that scan as well.) AdwCleaner[C10].txt AdwCleaner[S16].txt
  2. Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 2016-11-23 Scan Time: 20:30 Logfile: Administrator: Yes Version: 2.2.1.1043 Malware Database: v2016.11.23.14 Rootkit Database: v2016.11.20.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 10 CPU: x64 File System: NTFS User: phili_000 Scan Type: Threat Scan Result: Completed Objects Scanned: 373945 Time Elapsed: 7 min, 33 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 3 PUP.Optional.Elex, C:\ProgramData\WinSAPSvc\WinSAP.dll, Delete-on-Reboot, [3e7ccbf8faa01d19ba682f90da297090], PUP.Optional.Elex, C:\Program Files (x86)\WinArcher\Archer.dll, Delete-on-Reboot, [98223a890199ff37e83f6a55798a738d], Adware.Elex, C:\Program Files (x86)\Common Files\Services\iThemes.dll, Delete-on-Reboot, [febcf4cfe0ba46f0116ec21b5ea54eb2], Registry Keys: 5 Adware.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\iThemes5, Quarantined, [febcf4cfe0ba46f0116ec21b5ea54eb2], PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{198B5DCD-7FF1-4035-9869-5EBC82E51029}, Quarantined, [8a303d86eab0191d2300442036cd956b], PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ChelfNotify Task, Quarantined, [19a13d8651494aeca57f1f45ce35a35d], PUP.Optional.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Archer, Quarantined, [00ba5370adede551cfef9530669dfc04], PUP.Optional.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinSAPSvc, Quarantined, [6b4fbe05cad02412dae53e87d2317090], Registry Values: 1 PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{198B5DCD-7FF1-4035-9869-5EBC82E51029}|Path, \ChelfNotify Task, Quarantined, [8a303d86eab0191d2300442036cd956b] Registry Data: 0 (No malicious items detected) Folders: 3 PUP.Optional.Elex, C:\ProgramData\WinSAPSvc, Delete-on-Reboot, [3e7ccbf8faa01d19ba682f90da297090], PUP.Optional.Elex, C:\Program Files (x86)\WinArcher, Delete-on-Reboot, [98223a890199ff37e83f6a55798a738d], PUP.Optional.Elex, C:\ProgramData\ChelfNotify, Quarantined, [8d2d9e25b0ea1f17d405536051b22ed2], Files: 8 Adware.Elex.Generic, C:\Users\phili_000\Desktop\23.11.2016_19.14.55.zip, Quarantined, [16a4d5ee762479bd7ad7fddff21135cb], PUP.Optional.Elex, C:\Windows\System32\Tasks\ChelfNotify Task, Quarantined, [dddd1ba873272a0c02235113e1222ad6], PUP.Optional.Elex, C:\ProgramData\WinSAPSvc\WinSAP.dll, Delete-on-Reboot, [3e7ccbf8faa01d19ba682f90da297090], PUP.Optional.Elex, C:\Program Files (x86)\WinArcher\Archer.dll, Delete-on-Reboot, [98223a890199ff37e83f6a55798a738d], Adware.Elex, C:\Program Files (x86)\Common Files\Services\iThemes.dll, Delete-on-Reboot, [febcf4cfe0ba46f0116ec21b5ea54eb2], PUP.Optional.Elex, C:\ProgramData\ChelfNotify\9.3.6494.400.manifest, Quarantined, [8d2d9e25b0ea1f17d405536051b22ed2], PUP.Optional.Elex, C:\ProgramData\ChelfNotify\BrowserUpdate.exe, Quarantined, [8d2d9e25b0ea1f17d405536051b22ed2], PUP.Optional.Elex, C:\ProgramData\ChelfNotify\chrome_elf.dll, Quarantined, [8d2d9e25b0ea1f17d405536051b22ed2], Physical Sectors: 0 (No malicious items detected) (end)
  3. Okay, out of nowhere it started and finished in a few minutes. Zip: https://up2sha.re/file?f=QHXmOXesr8a7 Fixlog.txt
  4. It is still searching now, 2 hours has passed. Is this normal?
  5. Hello, thank you for the reply. I just got home from work and i am running the fix now. The program had been searching for roughly 40 mins now. But i guess this is normal. As soon as it is done i will upload.
  6. Hello, because i was dumb, i had some problems with a browser hijacker last night. I think managed to remove everything but a few registry posts that keep coming back. I have run AdwC, Malwarebytes and JRT. Ran the computer with clean boot. Tried in safe mode. I manually went to delete the posts, came back on reboot Even if AdwC seems to be able to remove some of them, the do come back after a short while. I ran FRST as i noticed it is usually something that is asked for, i uploaded the logs. If there is something i forgot to upload please say so. I am not that used to these things so if someone have any ideas i would be happy for any help. The keys are: HKU\.DEFAULT\Software\jhdbca HKU\S-1-5-18\Software\jhdbca HKLM\SOFTWARE\jhdbca [x64] HKLM\SOFTWARE\jhdbca Thanks guys. =) AdwCleaner[C9].txt Addition.txt FRST.txt
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.