karltwallin

Well, after coming home I realized my system was acting up to which I scanned with malwarebytez, this returned 11 entries that were infected and removed; so I ran the scan again and it showed up as clean however the original sluggishness didn't stop with the removal. Upon looking in my disk memory in resource monitor I saw some read/write processes that seemed a bit odd and were eating up my read/write value and during this my cpu was spiking or so it seemed. Maybe I am delusional idk

Hello, I previously was on here for a similar issue, idk if it's still the same thing to be honest; I thought it was resolved till yesterday. I went as far as to try and reinstall windows even. Getting super frustrated. I ran FRST.exe and attached both the log files from it. adwcleaner and malwarebytes wouldn't pick it up and before reinstalling windows I tried using a kapersky boot usb to fix it with no avail. any help would be much appreciated! I'm getting a bit frantic. Addition.txt FRST.txt

Alrighty, I've ran the cleaner DelFix and I just wanted to say that you were a HUGE help here and I really appreciate you taking your time to assist me with this. I'd say this can be marked as --CLOSED-- Have a WONDERFUL day!

Hi Kevin, Okay I think I just misunderstood the directions before. I have run FRST64 with the fixlist.txt you sent and here is the Fixlog.txt you asked for. Thanks again

I'll check back in on this when I get home later. Thanks again!

Run what?

Here are those files! Addition.txt FRST.txt

Seems to be all good! I really appreciate your timely responses! Have a wonderful week! You deserve it!

--------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v5.56, January 2018 (build 5.56.14443.1) Started On Tue Jan 09 15:38:58 2018 Engine: 1.1.14405.2 Signatures: 1.259.631.0 Run Mode: Interactive Graphical Mode Results Summary: ---------------- No infection found. Successfully Submitted Heartbeat Report Microsoft Windows Malicious Software Removal Tool Finished On Tue Jan 09 15:42:50 2018 Return code: 0 (0x0)

# AdwCleaner 7.0.6.0 - Logfile created on Tue Jan 09 23:27:12 2018 # Updated on 2017/21/12 by Malwarebytes # Database: 01-08-2018.1 # Running on Windows 7 Professional (X64) # Mode: scan # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\Classes\Interface\{BA935377-E17C-4475-B1BF-DE3110613A99} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Interface\{E7BC34A1-BA86-11CF-84B1-CBC2DA68BF6C} ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries. ************************* C:/AdwCleaner/AdwCleaner[C0].txt - [6171 B] - [2018/1/9 21:29:5] C:/AdwCleaner/AdwCleaner[S0].txt - [7406 B] - [2018/1/9 21:28:10] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt ########## Right on, I really appreciate it and I think this is something I can take from here! Thanks again!

Right on, I really appreciate it and I think this is something I can take from here! Thanks again!

Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 1/9/18 Scan Time: 3:10 PM Log File: 490ee93f-f592-11e7-b914-d43d7e55a54b.json Administrator: Yes -Software Information- Version: 3.2.2.2029 Components Version: 1.0.212 Update Package Version: 1.0.3661 License: Trial -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Computadora-PC\Computadora -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 281005 Threats Detected: 4 Threats Quarantined: 4 Time Elapsed: 7 min, 34 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 4 PUP.Optional.ChromeSearchClub.ChrPRST, C:\USERS\COMPUTADORA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Web Data, Replaced, [15191], [475079],1.0.3661 PUP.Optional.ChromeSearchClub.ChrPRST, C:\DOCUMENTS AND SETTINGS\ALL USERS\NTUSER.POL, Quarantined, [15191], [-1],0.0.0 PUP.Optional.ChromeSearchClub.ChrPRST, C:\PROGRAMDATA\NTUSER.POL, Quarantined, [15191], [-1],0.0.0 PUP.Optional.ChromeSearchClub.ChrPRST, C:\USERS\COMPUTADORA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Web Data, Replaced, [15191], [475079],1.0.3661 Physical Sector: 0 (No malicious items detected) (end)

alas sadly I cannot donate to you with paypal since it uses GBP and I am USD. :/ I wanted to at least show my appreciation a little bit I am in your debt

Hello Kevin, I am finished with rebooting my PC and it seems to have taken some effect. The two mentioned processes in the title have ceased to exist. This is a HUGE relief. I attached the log file that it created and am moving forward with the rest of your instructions (doing malwarebytez scan now). I just wanted to say again THANK YOU! I keep you posted as I complete the following steps. Fixlog.txt

Here ya go FRST.txt

Hello Kevin, Thank you so so much for a quick reply! This has been stressing me out all morning with no resolution thus far. I do have access to a clean computer as well as the 4gb drive. I have already run the FRST64 bit tool and will upload my frst.txt as well as the addition.txt. If you need anything else I am here eager to help in any way I can thank you so much again for your quick reply! FRST.txt Addition.txt

I was browsing for a resolution to a virus I have and came across a thread here where someone was assisted with almost exactly the same situation as me. I have gotten to the point where I was trying to follow along and he was inserting a flash drive with FRST64 and his fixlist.txt into it then realized that his fixlog.txt was translated to a fixlist.txt; so therefore I was unable to progress any further with my issue. Is there any way you'd be willing to help me out? the only difference between the two is my windows process manager is named differently idk if that makes a difference mine is named wibamsa.exe *32 and runs in tandem with a process called tibaerk.exe *32 which is titles as a print driver host. I would appreciate any help you could provide im at my wits end here Fixlog.txt